iCatch DVR firmware prior to 20200103 do not validate function parameter properly, resulting attackers executing arbitrary command.
icatchinc dvr firmware