Bricked my DS-2CD6412FWD-30 firmware 5.3.5 and discovered it is a chinese unit

[cdfr]

Hello,
I lost my password and thought I could quickly fix this by doing the reset on the camera. But then the camera did dot come up on its regular address. What a mistake !
I ran wireshark to find out it was on 192.0.0.64 and looking for a tftp server on 192.0.0.128

A few minutes after I realized it was not possible to download firmware from Chinese Hikvision support site and my reseller from 2015 is long gone so no possible support from him.
After googling here I am and I went trough the sticky thread R0 / DS-2CD2x32 BrickfixV2 brick recovery and full upgrade tool - enhanced. but then it is for DS-2CD2*


My first issue is to find a firmware that this Chinese camera accept. I tried the US Hikvision but it lists:

1. DS-2CD6412FWD-L30 Firmware: IPC_R6_EN_STD_5.4.3_160902
2. DS-2CD6412FWD-C2 : Archived Firmware: DS-2CD6412FWD-C2_V5.1.7 140904

No DS-2CD6412FWD-30 so I tried the first one as the firmware is not older than the one the camera came with.
I managed to change the language to chinese with Hikvision FIRMWARE TOOLS - change language, extract files and create own firmware, managed to get the camera download the firmware via Hikvision tftp tool but then once done the camera request again tfp and download again in a loop.

So my questions are :

• Is there a way to fix this camera on my own ?
• If so how can I locate a compatible firmware ?

Worse case scenario is there is any compatible firmware that does not handle this camera specifically as I just need basic functionality to use the camera with NVR and RTSP (no need for camera features like motion detection etc) ?
And if the answer is already somewhere here sorry, I searched for my camera model but doe not find anything.

Thanks.

 

[alastairstevenson]

I'm wondering what series your camera is, it's not a familiar model.

managed to get the camera download the firmware via Hikvision tftp tool

And did it say 'Firmware update successful'?
If so - it may confirm it's an R6 camera.

Check your 'Conversations'.

 

[cdfr]

I'm wondering what series your camera is, it's not a familiar model.

And did it say 'Firmware update successful'?
If so - it may confirm it's an R6 camera.

Check your 'Conversations'.

No unfortunately it did not say "Firmware update successful". I thought this may work as this camera starts with DS-2CD6

Is it worth trying with the DS-2CD6412FWD-C2 firmware instead ?

Is there a way a modified TFTP boot could display the expected firmware so at least I would know what version I need to get ?

And in case I find out the right version. Would just changing the language on it insure the firmware update would work ? I see recovery articles seems to be specific to certain series of cameras.

Thanks !

 

[alastairstevenson]

And in case I find out the right version.

The EU Portal lists DS-2CD6412FWD-XX as an R1 series, and also DS-2CD6412FWD/C as an R3 series.
But that's EN/ML firmware, which would presumably be rejected with a 'language mismatch'.
if you could force these on with the tftp updater, resulti8ing in Chinese menus, you should be able to manage the configuration with the Batch Update Tool.
Did the reset button just give Chinese menus, or did that cause it to no longer respond at all? Even with SADP?

DOWNLOAD EU PORTAL

www.hikvisioneurope.com

DOWNLOAD EU PORTAL

www.hikvisioneurope.com

Is there a way a modified TFTP boot could display the expected firmware so at least I would know what version I need to get ?

In theory - possibly - in practice it's more likely to match on device types rather than model numbers.

Would just changing the language on it insure the firmware update would work ?

That changes the language of the firmware header, which reduces the chance the firmware will be rejected, as opposed to changing the language of the camera itself.

 

[cdfr]

The EU Portal lists DS-2CD6412FWD-XX as an R1 series, and also DS-2CD6412FWD/C as an R3 series.
But that's EN/ML firmware, which would presumably be rejected with a 'language mismatch'.
if you could force these on with the tftp updater, resulti8ing in Chinese menus, you should be able to manage the configuration with the Batch Update Tool.
Did the reset button just give Chinese menus, or did that cause it to no longer respond at all? Even with SADP?

Reset resulted in the camera to not be visible in SADP anymore and I noticed it went from 192.168.1.64 to 192.0.0.64.

So if I got it right I should get an R1 and R3 firmware (presumably from the US hikvision site as I could not find these elsewere), Switch their headers to CN and try them via TFTP.
And then if this succeed I can configure the camera via the "batch update tool" (I need to get info on this as I did not know it).
Is this correct ?

Thanks !

 

[alastairstevenson]

A bit of a long shot, yes, trying that firmware.
As available linked to in my post above.
The Batch Configuration Tool is in the forum downloads section under Software / Hikvision.

 

[cdfr]

A bit of a long shot, yes, trying that firmware.
As available linked to in my post above.
The Batch Configuration Tool is in the forum downloads section under Software / Hikvision.

Thanks for the links. I had not noticed them before.
Can I use the Hikvision tftp tool ? I did read somewhere another was suggested.

Thanks !

 

[cdfr]

So tried R1, R3, R6 changed to CN language and got this in a loop.