Hi all, and big thanks to @Jalecom for the excellent HC1703L teardown — it let me get root over the SD debug_cmd.sh trick and diagnose my camera precisely.
My device: white PTZ cam sold as YCC365 Plus (apps: YCC365 Plus / iCam365, Tange cloud). SoC Augentix HC1703, board hardware_id=TB008_NOR...