Hikvision camera will not reset password

[markusace]

Hopefully I have posted correctly this time!

Signed up to this forum as there seem to be some very knowledgable and helpful people here.
I have two Hikvision cameras both PoE and both connected to a QNAS NAS (using Surveillance station) on my network. Router is a Netgear BR500 and usual configuration done via Surveillance station or lately SADP on a 2017 IMAC running 10.14.2 .

Cameras working for 2 years with no issues recording 24/7 and remote viewing via QNAP service

In early December one of my cameras - Camera 2 stopped being available to view the image online. Further investigation showed that the camera was no longer accepting the admin password (which is the same on both) nor the default or any other I tried even though I know I had not changed it. Eventually got to HiK support and lady called Cathy Tang who exchanges an XML file with me most days. Unfortunately when I use SADP to try and reset the password I always get 'Device Denied'. Support just keep asking me to send another xml.
SADP can see both cameras and IVMS can too (as can using safari IP address) so it is there.

SADP shows DS-2CD2342WD-I and active at the IP address I reserved for the camera. Port shows 8000 and firmware V5.3.8 build 151224 plus MAC address a start time (now 2019-01-06 16:41:29 as I unplugged it.) I also have DSP build V7.0 151027.
Interestingly the other camera (DS-2CD2042WD-I) displays an IPv6 address and IPv6 prefix length (as well as IPv4) whilst this one is blank for IPv6. Both show port 8000 and HTTP port 80 (although noticed ports 9010 and 9020 are open in UDP for both cameras as well as 554.

I provided the SADP screen to the HIK support a few times and the serial number exactly as on SADP. They did ask for the time on the camera which obviously I had no idea as I cannot access it.

Apologies if too much information but I am really stuck on what to do. I am considering just getting up a ladder removing the camera and sending it for recycling. maybe buy a different make of PoE camera.

I have tried asking questions of the HIK support but they just ask for another xml file.

Anyone help me? Please note I am ok with network stuff but need guidance on anything unfamiliar.

looking forward to chatting with some of you.

 

[alastairstevenson]

Hopefully I have posted correctly this time!

You have.
Zip up your extracted configuration file and I will decrypt it, decode it and extract the password for you.
Hacked cameras have typically been given 1111aaaa as the new admin password, but this may have been changed to asdf1234 as the original has become known.
We'll see.

 

[markusace]

As requested , well encrypted that is. I tried those 2 passwords just in case , it said locked for 8 minutes , now says locked for 28 mins. I've also switched UpNP off on the router and removed the camera from the NAS. I have switched off UpNP on the other camera I can still access . That one is on 5.4.0 build. Checked on Hikvision.com no firmware update available - says 'coming soon'.

 

[markusace]

Me again. I have tried to update firmware on my other working camera and recall trying to do this last year with no success. I have sourced and downloaded and extracted the file ready (R6 series) but the firmware update won't browse to the file. I just see no plug in detected in red at the bottom. Running latest safari on iMac . I also recall installing a safari plugin.
I am beginning to despair the Hikvision cameras have had vulnerabilities and no easy way of upgrading to fix. You guys able to recommend a different make of PoE IP camera that is useable in windows and Mac and can be physically reset?

 

[markusace]

and to cap all this - Hikvision UK and Ireland have just emailed me to say my devices are not supported because amazon.co.uk are unauthorised distributors. Hey ho I live and learn. I feel another email to jeff@amazon.com (he does actually get someone to sort).

 

[markusace]

...and Alastair you are brill - feel like driving to Scotland to thank you. Got in with asdf1234 seems you were correct. What a great forum. Now I need to find out how to upgrade firmware on Mac . I've switched of upnp and set up limited IP address access. Last resort will be to unplug until I know I am clear of whoever.

 

[alastairstevenson]

Got in with asdf1234 seems you were correct.

Yes indeed - your HIKVISION DS-2CD2342WD-I - 590307096 Camera 02 does have that password, which likely confirms it was hacked.

I am beginning to despair the Hikvision cameras have had vulnerabilities and no easy way of upgrading to fix.

The Hikvision backdoor was pretty bad - and widely exploited - but has been fixed in 5.4.41 and later versions of firmware.
There is a handy source of R6 firmware on the forum downloads here : R6 series firmware - see models list

Unfortunately it's usually Windows that's needed to work with these cameras.
However - there is a Mac OS version of the Batch Configuration Tool here : Tools-Hikvision
I have no idea how well it works - may be worth a look.
The Windows version works well.

 

[alastairstevenson]

Checked on Hikvision.com no firmware update available - says 'coming soon'.

A collection of R6 firmware handily on the forum here : R6 series firmware - see models list

Ooops - I already said that.
Getting even more forgetful than usual.