I cant break out of "BusyBox v1.2.1 Protect Shell (psh)", but I can avoid it.
Code:
ssh root@<IP of camera> "ash -c 'ls /dav'"
root@<IP of camera>'s password:
ASC16.bin
GBK
IEfile.tar.gz
WebComponents.exe
_cfgUpgClass
_cfgUpgSecPls
...