The Linux system most of the NVR/DVRs are running on are likely very outdated. A vulnerability doesn't necessarily reflect a deliberate backdoor, though. If I was building a backdoor, I'd want it in the hub not the individual cameras. Also having 100k to 1m dumb iot devices on residential...