Camera Keeps resetting it's own password

razorseal

Getting the hang of it
Joined
Oct 17, 2014
Messages
149
Reaction score
6
Hey everyone,

I'm using hikvision cameras in my house, and the one in question is a DS-2CD2432F-IW. (I can't tell fw because I can't login at this moment).

The cameras resets its own password randomly, causing me to lose access to it... any ideas what this could be?

I use the admin username with my own password.

I think I've had another camera do this, but I can't remember...

Thanks!
 

Mike

Staff member
Joined
Mar 9, 2014
Messages
2,982
Reaction score
2,725
Location
New York
How do you know the camera is resetting it? Do you login with default PW? What firmware are you running? Make sure you're on the latest firmware, you may be hacked. Check our downloads section for firmware.
 

razorseal

Getting the hang of it
Joined
Oct 17, 2014
Messages
149
Reaction score
6
How common is it to get hacked? I don't login with Default PW. I don't know FW because I just got locked out, so I can't see until I login after I reset password.

I believe camera resets it because I can see the password on blue iris and I know the password.

I've always been afraid of fw updates on these. I heard you can brick them if it's a grey market one or something. I don't remember where I got it 4-5 years ago lol.
 

Mike

Staff member
Joined
Mar 9, 2014
Messages
2,982
Reaction score
2,725
Location
New York
I mean after the password is changed, is it changed to the default password? Is admin being changed? 4-5 year old firmware has a chance of being hacked
 

fenderman

Staff member
Joined
Mar 9, 2014
Messages
36,897
Reaction score
21,250
How common is it to get hacked? I don't login with Default PW. I don't know FW because I just got locked out, so I can't see until I login after I reset password.

I believe camera resets it because I can see the password on blue iris and I know the password.

I've always been afraid of fw updates on these. I heard you can brick them if it's a grey market one or something. I don't remember where I got it 4-5 years ago lol.
It is VERY common. There is no reason your camera should be exposed to the internet. You MUST disable all port forwarding for the cameras on your router AND disable UPNP on the ROUTER AND on the camera itself.
 

razorseal

Getting the hang of it
Joined
Oct 17, 2014
Messages
149
Reaction score
6
it is for the admin. I just changed the password again (used recovery tool).

Let me check the port forwarding article now. I access everything through blue iris. How will I access it if I disable everything?

I'm on 5.2.5 build 141201
 

fenderman

Staff member
Joined
Mar 9, 2014
Messages
36,897
Reaction score
21,250
it is for the admin. I just changed the password again (used recovery tool).

Let me check the port forwarding article now. I access everything through blue iris. How will I access it if I disable everything?

I'm on 5.2.5 build 141201
VPN. But the password hack will only occur if the CAMERA itself is port forwarded, which is dont automatically by many cameras if your router is set to allow upnp.
 

razorseal

Getting the hang of it
Joined
Oct 17, 2014
Messages
149
Reaction score
6
VPN. But the password hack will only occur if the CAMERA itself is port forwarded, which is dont automatically by many cameras if your router is set to allow upnp.
I used to use a VPN on that computer (PIA with port forwarding) but I haven't used it in a while. I had issues with it when they would reassign port numbers etc.

I checked off UPNP on the camera. For port forwarding, where do I look on camera settings? I just have the Port tab with the untouched settings.

I also can't find a newer FW besides what I have. My camera isn't even on the downloads, or I'm not seeing it (DS-2CD2432F-IW)
 

Q™

IPCT Contributor
Joined
Feb 16, 2015
Messages
4,990
Reaction score
3,989
Location
Megatroplis, USA
@razorseal needs to Google port forwarding...

From Google said:
Port forwarding lets people connect to the mapped port on whatever device you've pointed it at. The security rests solely with whatever software on that device is listening on that port. So say you've port forwarded 12345 to remote desktop on a PC you never update. Odds are it will be easy to get in to that, and then to whatever it has access to (maybe the whole LAN including the "secure" side of the router). On the other hand, if you port forwarded 6789 to port 22 on a Linux box you update every night, chances are very slim anyone will be able to break-in to it. #1 doesn't make sense, your IP is technically public.
 

fenderman

Staff member
Joined
Mar 9, 2014
Messages
36,897
Reaction score
21,250
I used to use a VPN on that computer (PIA with port forwarding) but I haven't used it in a while. I had issues with it when they would reassign port numbers etc.

I checked off UPNP on the camera. For port forwarding, where do I look on camera settings? I just have the Port tab with the untouched settings.

I also can't find a newer FW besides what I have. My camera isn't even on the downloads, or I'm not seeing it (DS-2CD2432F-IW)
PIA is a waste of money and does absolutely nothing. You need to run a vpn server on your end. See vpn primer for noobs thread.
port forwarding is done on the router. You dont need to update the firmware if you dont give the camera access to the internet, which it likely has.
 

razorseal

Getting the hang of it
Joined
Oct 17, 2014
Messages
149
Reaction score
6
PIA is a waste of money and does absolutely nothing. You need to run a vpn server on your end. See vpn primer for noobs thread.
port forwarding is done on the router. You dont need to update the firmware if you dont give the camera access to the internet, which it likely has.
Right, I have port forwarding enabled for blue iris so I can login to that and see my cameras remotely...

how do I disable access for the camera to internet? I shut off UPNP, but can't figure out how to disable port forwarding?
 

fenderman

Staff member
Joined
Mar 9, 2014
Messages
36,897
Reaction score
21,250
Right, I have port forwarding enabled for blue iris so I can login to that and see my cameras remotely...

how do I disable access for the camera to internet? I shut off UPNP, but can't figure out how to disable port forwarding?
check your router and see if there are any ports forwarded other than the blue iris webserver port.
 

razorseal

Getting the hang of it
Joined
Oct 17, 2014
Messages
149
Reaction score
6
Tried updating fw of the camera. Now I no longer can access it... been over 10 minutes. That's a bummer.

I have 3 port forwards, Blue Iris, Plex Server and Octoprint (for 3d printing)
 

Q™

IPCT Contributor
Joined
Feb 16, 2015
Messages
4,990
Reaction score
3,989
Location
Megatroplis, USA
Tried updating fw of the camera. Now I no longer can access it... been over 10 minutes. That's a bummer.
It would be helpful if you could provide better descriptions of what you have done. What does "tried" mean? Did you successfully upload new firmware to your camera and initiate the firmware update function via the camera's Web User Interface?
 

razorseal

Getting the hang of it
Joined
Oct 17, 2014
Messages
149
Reaction score
6
It would be helpful if you could provide better descriptions of what you have done. What does "tried" mean? Did you successfully upload new firmware to your camera and initiate the firmware update function via the camera's Web User Interface?
Alright, not sure how descriptive I can be.. Let me try to be more helpful so you can help...

I have a DS-2CD2432F-I(W) with V 5.2.5. I don't recall where I bought it. I believe it was 2015 when i purchased it.

I went on here and found the appropriate FW - R0 series DS-2CD2x32x-Ixx IP camera firmware

I downloaded it, used winrar to unzip, and went to my camera's browser, went into advanced > system > maintenance and browsed to the .dav file and clicked upgrade.

It has been about 20-30 minutes and the camera has the alarm LED on and IR light on. No other activity.
 

Q™

IPCT Contributor
Joined
Feb 16, 2015
Messages
4,990
Reaction score
3,989
Location
Megatroplis, USA
Thank you.

Where did you purchase your Hikvision cameras?

Does the camera in question have the string "CCH" in it's serial number?
 

razorseal

Getting the hang of it
Joined
Oct 17, 2014
Messages
149
Reaction score
6
Thank you.

Where did you purchase your Hikvision cameras?

Does the camera in question have the string "CCH" in it's serial number?
I don't recall. I remember one of them was purchased on ebay (used) but I can't recall which it was. I have two bullet cams that were purchased from amazon via 3rd party... I think it was ali express now that I think about it.

I believe it did. All 3 cameras have "CCH" on the serial that I can see from SADP now. I believe that one did too.

Let me guess... What I dreaded earlier just happened to me. This is a Chinese fw and I just tried uploading EN fw to it, and bricked it.
 
Top