R0 / DS-2CD2x32 BrickfixV2 brick recovery and full upgrade tool - enhanced.

[tradertim]

Hi can someone that has been successful in updating non bricked Chinese cameras please point me in the right direction I am having trouble getting started.

Have spend few 3-4 hours today reading pages 1-18 of this forum, read the step by step and I'm a little confused as to where I start for scenarios where my Chinese cameras are not bricked.

I have 3x DS-2CD2432F-IW20160521CCCH all at 5.2.5 I'd like to update.

Where 1) 2) - 7) in the step by step do I start - can I bypass any of it - do I need to use the tftp server even though I can access the cameras and they are not bricked.

rgs

 

[alastairstevenson]

Post 1 is all you need to work the procedure - the step-by-step guide, and maybe the video to ensure understanding of the steps.
You don't need to bypass any steps even though the cameras are not bricked, just not updatable and are vulnerable.
Start at the beginning.
Just make sure you look up the devType code in the list for the specific cameras.
You'll be fine!

 

[pepeEL]

Confirm post 1 has all what we need to do this... Only read slow and do step by step... Some days ago i also do this and all was succesfull.

 

[tradertim]

thank you guys I will give it a crack.

 

[tradertim]

Hi guys I am stuck getting the TFTP server connectivity working.

I have checked Windows Defender it is off. I have tried both the 32 and 64 bit tftp servers, I have tried changing the server IP Address to my laptop at 192.0.0.128. Assume my laptop address is supposed to be the TFTP Server address and not the loopback.

From my laptop I can ping both the camera 192.0.0.64 and the laptop 192.0.0.128.

I loaded the renamed BrickFixv2CN to digicap.dav directly from the maintenance GUI as my camera was not bricked. I assumed I used the BrickFixCN as my camera is grey market.
I pulled the PrtHardInfo before I started.

After applying the Brickfixv2CN to the camera I can login via PUTTY and root BUT the tftp fails and this is where it all falls down.

I am still trying things about to reload the 32 bit TFTP Server and then restart the laptop as well.

Did someone mention there were other parameters on the laptop other than Windows Defender? Its got McAfee on it as well being a work laptop but I don't think I can remove that.

Any help appreciated ..... still trying to figure it out.

 

[pepeEL]

I had problem similar on windows 10. On windows 7 goes without problem.

 

[tradertim]

ok I turned off McAffee Endpoint security and at least I am now getting the TFTP logs.

There is a connection request from the camera at 192.0.0.64 write requests for fixup_log and mtd6ro_orig etc

BUT tftp server log reports

Error is error 5 in system call CreateFile Access is denied

Originally I was doing all this on a folder in desktop... but with issues I moved everything to C:BrickFix directory.

I'm still trying to resolve.... couple hours and counting nothing seems to go simple.......... fricken Hikvision .... no wonder My mates are moving to others that just work and are not locked down....

 

[tradertim]

Hi guys have resolved a doofy error I hadn't changed the TFTP directory to be the same as where all the original files resided.

So I have now successfully got straight to 5.4.5 on one so onto the other 3. haha.

Has anyone managed to import their 5.2.5 configuration parameters or is it a total rebuild? I tried to import but it is hung.

I guess an upgrade in increments would preserve this to 5.2.5 -> 5.3 -> 5.4... might try that next time.

Alistair again like so many thank you so much for your efforts to document, and all others to share learnings. Hopefully life plays it forward to you Alastair as you are amazing and generous with your time and advice.

 

[tradertim]

I'm not sure the push notification's for motion / line/ intruder are working for cube 2432F-IW on 5.4.5.
Motion was working before ivms4500 on PIR alarm for cube 2432F-IW on 5.2.5.

Definitely working on the 4mp dome DS-2CD2142FWD-I running 5.4.0, I just tested it both line and intruder push notification works.

The trouble with just updating to 5.4.5 if its indeed broken on the 2432F-IW on 5.4.5.

 

[tradertim]

Can I downgrade from 5.4.5 to 5.4.0?

Its not a straight GUI firmware load 5.4.0 as I tried that & got a fail message.

Any suggestion on how to get back to 5.4.0?

Not so concerned on the backdoor vunerability as I vpn and cert into my router before connecting to the local network.

I think push notifications are broken motion/ line/ intruder on 5.4.5 and not on 5.4.0.

Works on a dome on 5.4.0.

Updated a cube on 5.2.5 which motion used to work and now see nothing on 5.4.5.

 

[alastairstevenson]

Updated a cube on 5.2.5 which motion used to work and now see nothing on 5.4.5.

5.4.5 works OK for motion and smart events.

Can I downgrade from 5.4.5 to 5.4.0?

Yes, use the tftp updater tool.
But the Hikvision firmware blocks attempts to install lower than 5.4.0, the 'downgrade block'.

 

[alastairstevenson]

Hi guys have resolved a doofy error I hadn't changed the TFTP directory to be the same as where all the original files resided.

So I have now successfully got straight to 5.4.5 on one so onto the other 3.

Well done for figuring that out, and doing the upgrade.

 

[tradertim]

5.4.5 works OK for motion and smart events.

Yes, use the tftp updater tool.
But the Hikvision firmware blocks attempts to install lower than 5.4.0, the 'downgrade block'.

Hi my comment was with respect to push notifications for motion/ & smart events.
The alarms wotk via email, trigger record BUT not push notification.

Two cubes no longer push notify on motion alarm whereas they used to on 5.2.5.

Whats the general premise with the "tftp updater tool"?

I have the Hik Vision tftp server from the BrickV2 work.

rgs

 

[alastairstevenson]

Whats the general premise with the "tftp updater tool"?

I have the Hik Vision tftp server from the BrickV2 work.

It's the same thing - just my loose terminology.

 

[ARMAN ZHUMABAYEV]

Dear, alastairstevenson Please, could you help me with my DS-2CD6424FWD-C1( v5.5.5_180314) from Aliexpress? The language is chineese, and when i connect with my NVR, they show me mistake "language mismatch'". Please Could you give me some advise

 

[alastairstevenson]

Try connecting the camera to the NVR as an onvif device, in case your NVR is not checking language that way.

 

[razorseal]

I got it to work!

Now my question is, I did this on a bricked device. How do I do the mtd hack only so I can upgrade my devices?

I assume this method only works for bricked devices?

 

[tradertim]

One of the errors I had was because
the digicap.dav software file 5.4.5 was not in the same directory of the mtdhack and scripts so presumably it couldnt find it.

I didnt have a problem going straight to 5.4.5 from 5.2.5 but it wipes any config and reconfig is neccesary.

I didnt figure out a way to retain the orginal configuration.

Also because my cameras werent bricked I could just load in the first digicap.dav file instead of bothering with the hikvision tftp step.

 

[razorseal]

One of the errors I had was because
the digicap.dav software file 5.4.5 was not in the same directory of the mtdhack and scripts so presumably it couldnt find it.

I didnt have a problem going straight to 5.4.5 from 5.2.5 but it wipes any config and reconfig is neccesary.

I didnt figure out a way to retain the orginal configuration.

Also because my cameras werent bricked I could just load in the first digicap.dav file instead of bothering with the hikvision tftp step.

So how do I do it if it's not bricked? Which part am I skipping? you go straight to telnet part?

My problem was trying to update to 5.4.41 instead of 5.4.5... you must go to 5.4.5, nothing before, or you'll have to consecutively update.

 

[tradertim]

read my post about 5 messages ago where i loaded the brickfixv2CN direct from the GUI as my cams werent bricked.

I stopped at 5.4.5 .... they broke enough on that version.

If you have a cube you'll need Alastair mod FW from Network Disconnect thread.

I am not sure whether that network disconnect issue was fixed in 5.4.41 or not.

Alastair seemed to imply it may have.