Help looking for reset on IP PoE camera from Lorex, unknown OEM

[digeratist]

This sounds dumb... but thats a lorex GUI before they were purchased by Dahua. I think they converted a year or two ago along with flir and honeywell cameras.

These seem like pretty new cameras (4k + microphone). The NVR doesn't even show up when you search for it on their website. Wondering if it was a specific costco kit, or if they've started getting different cameras from a new OEM?

I don't really want to have to return the system. I've actually been fairly impressed by the "working" camera and I like that it has a mic on it.

 

[bababouy]

Ok, lets go back to the begining. You were able to change the user name how? Did you create a new account in the interface with a new password? Usually you cannot change the admin user name in cameras, you can only create a new user name.

 

[MixManSC]

That is an odd one. I'd somewhat doubt Lorex would be sourcing from any other manufacturer besides Dahua now since Flir sold Lorex to Dahua earlier this year. That being said that oddball camera could be some inventory they bought prior to the sale of the company to Dahua. I know Lorex a few years ago also used OEM Hikvision but who knows if they might have sourced hardware from other OEM's as well.

Only thing that looks promising to me is J5 on the board. That is button or connector of some sort. I'd probably try testing those pins with a meter to ground and see what you get. Might even be tx, and rx pins and you could then use a serial connection.

 

[digeratist]

Ok, lets go back to the begining. You were able to change the user name how? Did you create a new account in the interface with a new password? Usually you cannot change the admin user name in cameras, you can only create a new user name.

By using the flir client 12 software, logging in with admin/admin. Go to users section in screenshot of first post. put in "admin" in the blank username box and changed the password. I believe it prompted for the original password, then saved. It auto logged out and upon trying to login with the new password it says "Username not found" (for admin and anything else I've tried putting in there). When I connect to the other camera that I haven't changed, an incorrect password will say just that.

 

[mat200]

By using the flir client 12 software, logging in with admin/admin. Go to users section in screenshot of first post. put in "admin" in the blank username box and changed the password. I believe it prompted for the original password, then saved. It auto logged out and upon trying to login with the new password it says "Username not found" (for admin and anything else I've tried putting in there). When I connect to the other camera that I haven't changed, an incorrect password will say just that.

Hi Digeratist,

Dahua cameras used to have the following defaults, some of these should have recently changed due to the various attacks against the cameras - so I would guess they would not work any more, but still maybe worth attempting to try the 88888 account ( again since we are uncertain this is a Dahua OEM camera do not know if it has a 88888 account even )

Traditional account defaults on older Dahua cameras:

Username: admin Password: admin
Username: 666666 Password: 666666 ( not certain if this still exists )
Username: 888888 Password: 888888.

 

[digeratist]

Hi Digeratist,

Dahua cameras used to have the following defaults, some of these should have recently changed due to the various attacks against the cameras - so I would guess they would no work any more, but still maybe worth attempting to try the 88888 account ( again since we are uncertain this is a Dahua OEM camera do not know if it has a 88888 account even )

Traditional account defaults on older Dahua cameras:

Username: admin Password: admin
Username: 666666 Password: 666666 ( not certain if this still exists )
Username: 888888 Password: 888888.

Thanks for the ideas. I just tried 111111, 222222,333333, 444444, 555555, 666666, 777777, 888888, 999999,000000 as well as the the same but 5 in length.
Dahua config tool doesn't seem to see it. Hikvision SADP tool doesn't see it. ONVIF Device Manager can see it but says unauthorized access.

Any other OEM's with discovery tools I should try?

@MixManSC - Will you clarify how exactly to test the pins? Multimeter reading from each pin to ground?

 

[mat200]

Thanks for the ideas. I just tried 111111, 222222,333333, 444444, 555555, 666666, 777777, 888888, 999999,000000 as well as the the same but 5 in length.
Dahua config tool doesn't seem to see it. Hikvision SADP tool doesn't see it. ONVIF Device Manager can see it but says unauthorized access.

Any other OEM's with discovery tools I should try?

@MixManSC - Will you clarify how exactly to test the pins? Multimeter reading from each pin to ground?

Hi Digeratist,

Did you ever get a good reply from Lorex tech support?

Would be worth asking about factory reset from them and any OEM tools.

 

[digeratist]

Hi Digeratist,

Did you ever get a good reply from Lorex tech support?

Would be worth asking about factory reset from them and any OEM tools.

I guess I need to try and call in to a support number. Their email /ticket system has been worthless. No response.

 

[digeratist]

Looks like they finally have the kit showing up on their website now: 4K Ultra HD IP NVR security camera system with four 4K (8MP) IP cameras

 

[MixManSC]

Thanks for the ideas. I just tried 111111, 222222,333333, 444444, 555555, 666666, 777777, 888888, 999999,000000 as well as the the same but 5 in length.
Dahua config tool doesn't seem to see it. Hikvision SADP tool doesn't see it. ONVIF Device Manager can see it but says unauthorized access.

Any other OEM's with discovery tools I should try?

@MixManSC - Will you clarify how exactly to test the pins? Multimeter reading from each pin to ground?

it can be complicated and beyond my ability to explain well. There is an "unbricking" thread here - I believe in the Dahua subsection that can give you so ideas maybe. Its its likely TTL level serial as well so you would need to get a TTL/RS232 adapter if you can determine that is has serial capabilities on those or some other pads on the board. But yes - testing with a multimeter to any of the common ground points on the board to those pads to see if you are getting 3.5v or so or maybe 12v on any given pads. It can be a bit risky to just connect a ground pin and then start poking the RD wire from a serial cable are random pads on a board with a serial console open while at the same time trying to power cycle the device and then see if you get any serial output data on the console window.

 

[digeratist]

I talked with Lorex support last night... and it took a while to get the girl to figure out there is no web interface, no reset button, etc. She tried both "admin" and "root" accounts, but everything kept saying "username does not exist". They ended up agreeing to RMA the camera, so hopefully that will all work out.

If anyone has any other thoughts to try before that happens, I'm happy to attempt for the sake of others that have run into this same issue.

 

[alastairstevenson]

If anyone has any other thoughts to try before that happens

If you need to call them again, maybe ask about the serial console connection, if any.
Though that would advertise that you have opened the camera, which might void any warranty.

This problem does sound like a bug, though. Maybe they can reproduce it.

 

[thejaybo]

I have swann true detect cameras that i was able to crack and get working outside of the swann nvr. the camera model is RS-CM-214B . If you haven't been able to reset your password yet, message me.

 

[hockey]

I have swann true detect cameras that i was able to crack and get working outside of the swann nvr. the camera model is RS-CM-214B . If you haven't been able to reset your password yet, message me.

Huh. That's the PCB lable in these darned Lorex LKB343 series cameras. Did Swann get eaten by Lorex (eaten by Dahua...?).

I borked the username so I have no admin user; just a dumb user with limited access. I've desoldered & shorted the CMOS battery tabs for several hours, but still no reset. Anybody have ideas to what the reset terminals are on this cam?

 

[mat200]

Huh. That's the PCB lable in these darned Lorex LKB343 series cameras. Did Swann get eaten by Lorex (eaten by Dahua...?).

I borked the username so I have no admin user; just a dumb user with limited access. I've desoldered & shorted the CMOS battery tabs for several hours, but still no reset. Anybody have ideas to what the reset terminals are on this cam?

Swann still seems to be it's own brand .. no longer with Hikvision OEM cameras tho ..

 

[tech_junkie]

One of the issues is them using 10.10.25.XXX which some ISP will use that 24Bit address in their local network, which causes conflicts when a consumer uses that address pool.

This is how you would set these lorlex up:
The below is with a standard network connection with a dhcp and router address of 192.168.1.1 Subney mask 255.255.255.0 DHCP pool address range 192.168.1.2 thru 192.168.1.100

Step 1: With only he monitor and mouse connected to NVR (NO network or cams connected) In the menu: Under Advanced, click Maintenance to open the Maintenance tab. Click Load Default Reboot NVR to DAY 0 (defaults)

Step 2: when the NVR boots, go through the wizard and input the admin's password you want to use, then set up local , time, etc and exit out of the wizard.

Step 3: Under Settings, click Network, then click on the Switch tab, Click the fields next to IP Address, Subnet Mask and Gateway to edit IP address: 192.168.23.100 Subnet Mask: 255.255.255.0 Gateway: 192.168.23.1

Step 4: make sure DHCP is checked: Under Settings ->Network

Step 5 connect cameras. When you plug them in a port, they will appear with an ip address after first boot (3 minutes) if not, Under Advanced, click Maintenance , Click IPC Load Default. Check the cameras you would like to restore default settings for and click OK . After 5 minutes they should appear connected . This reset only will happen to cameras connected to the cam ports, and not past two switch levels on the LAN side. Sometimes, you have to connect the camera to the cam port if it doesn't reset over the network.