Camera password somehow changed, cannot get in

[wondering]

I oversee a three-year-old installation of 16 2CD2342WD-I cameras, all purchased through Amazon, and over the past six months three of them have somehow had the password changed, which is pretty much impossible because nobody else knows the passwords or even how to log in.

I have tried the default admin/12345 credentials as well as the password reset tool published through this form, but I have not had any luck with either. There does not seem to be a reset button on any of them.

How should I proceed? New cameras?

 

[bp2008]

How to Secure Your Network (Don't Get Hacked!) | IP Cam Talk

I believe the cameras will be reset to default if you use the tftp firmware update method. You can google for how to tftp update a hikvision camera.

 

[wondering]

How to Secure Your Network (Don't Get Hacked!) | IP Cam Talk

I believe the cameras will be reset to default if you use the tftp firmware update method. You can google for how to tftp update a hikvision camera.

Fascinating! I did not know this is possible. However, I do not physically have access to the cameras, as I am located in another state, and it may be difficult to impossible to get someone who is onsite to get a camera hooked up to a computer the right way and grant me remote access.

 

[Mike]

I oversee a three-year-old installation of 16 2CD2342WD-I cameras, all purchased through Amazon, and over the past six months three of them have somehow had the password changed, which is pretty much impossible because nobody else knows the passwords or even how to log in.

I have tried the default admin/12345 credentials as well as the password reset tool published through this form, but I have not had any luck with either. There does not seem to be a reset button on any of them.

How should I proceed? New cameras?

Is it 3 year old firmware? Sounds like you got hacked.

 

[wondering]

Is it 3 year old firmware? Sounds like you got hacked.

Oh my! I did not know this was possible, either!

 

[wondering]

@Mike, of the bad cameras, two are V5.4.1 build 160525 and one is V5.4.3 build 160902.

 

[bp2008]

It sounds like you could use the reset tool here: bp2008/HikPasswordHelper Those firmwares are all well-within the range of firmwares supported by that tool.

Just make sure you disable any port forwarding / UPnP that exists and ideally prevent the cameras from accessing the internet at all using your router's firewall or parental controls (not all routers offer such functionality).

 

[alastairstevenson]

If you've been hacked - which does seem very likely - a common password that the bots create is 1111aaaa
@bp2008 reset tool is very likely to work.

But if not - here is a URL to extract the configuration file, which can then be decrypted and decoded to extract the password, if you zip it and attach it here .
http://<camera_IP_address>/System/configurationFile?auth=YWRtaW46MTEK

 

[markusace]

Hi, just seen this thread . I have the same problem. I have used the above to extract the configuration file. If I attach can you decry the password for me?

 

[alastairstevenson]

Yes, sure, zip it up and attach.