Have you encountered an exposed view view.shtml page in the wild? Share your experience responsibly with your local CSIRT or the vendor.
Many devices using this naming scheme default to "open access." The manufacturer assumed the device would be on a private, trusted network. When exposed to the internet, there is no login prompt—just data. inurl view view.shtml