Flashing Dahua firmware on OEM cameras

scoob8000

Getting the hang of it
Dec 28, 2018
123
55
PA
I have the 5mp QSee QC888 POE system from Costco last year.

The cameras are QSee QCN8099B, which I'm about 99.9% sure is really the Dahua IPC-HFW1531S. Specs and everything are identical.

I'm trying to get the cameras to work with my new QNAP Nas. It doesn't support the Qsee cams, but does "support" the Dahua model.

So all that said, would it be feasable to flash the Dahua firmware on the Qsee camera? My concerns are bricking the camera, or having it no longer work with it's own NVR if I want to go back.
 
Put here frmware to your ipc or better flash dump ;)

This is the firmware for my QSee. I Can't actually find a Dahua firmware.


If you add the camera as the Dahua model, and get the message 'Camera model mismatch', that can be safely ignored, it's informational, not fatal.

If I add it under the Dahua model, it doesn't work or connect at all. I suspect Qsee tweaked things just enough to screw up interoperability. :/
 
Did you every figure this out? I have the same cameras and was thinking of trying to flash them with the latest firmware from Dahua.
 
So I tried to flash this camera with the latest Dahua equivalent firmware but unfortunately it won't take the firmware update and just reboots back with the original firmware. Similar to what the NVR does. Q-see must have put some firmware checks in place to prevent this from happening.
 
Try it with old ConfogTool or you need open your ipc, connect to ttl & update
 
Try it with old ConfogTool or you need open your ipc, connect to ttl & update
Thank you iTuneDVR...I was just reading the post RE using TTL. I didn't know about trying the old ConfigTool...happen to know what version or where to get the right one?
 
Thanks iTuneDVR! I was hoping that scoob8000 had tried it first with success before I give it a shot.

Sorry, I never did try it. Well I tried a few files like you mention, but they just reboot and the cam stays on the old version.

I forget what kind of functionality I was trying to get out of them. I ended up ditching the NVR and building a small PC to run Blue Iris on and I'm doing all my motion detection stuff there.
 
Sorry, I never did try it. Well I tried a few files like you mention, but they just reboot and the cam stays on the old version.
It mean than name of oem device & name inside firmware fil ie s not tne same & nvr reboot. Need correct or try update via ttl.
It's not the big problem, but if you use other solution so ...
 
Last edited:
Sorry, I never did try it. Well I tried a few files like you mention, but they just reboot and the cam stays on the old version.

I forget what kind of functionality I was trying to get out of them. I ended up ditching the NVR and building a small PC to run Blue Iris on and I'm doing all my motion detection stuff there.
Thanks scoob8000. I appreciate the reply. Not sure what features I would really gain by upgrading so not sure if it’s worth pursuing anyway.
 
I flashed QCN8099B with "HX2X3X-Rhea" firmware as suggested via recovery method and it is working and shows up as Dahua N51BD23. I do not use QSee NVR and do not know if you will have an issue with it.
 
I flashed QCN8099B with "HX2X3X-Rhea" firmware as suggested via recovery method and it is working and shows up as Dahua N51BD23. I do not use QSee NVR and do not know if you will have an issue with it.
Thats great news! Thank you for taking the time to post your success back here....I'm going to give it a try as I still have 5 of these cameras functioning...all the other have died :( but I've gotten a lot of years out of them. Now I just have to find how to flash them using the recover method again....it's been a loooog time since I tried it last.
 
I used the network method recovery and did not have to pull out my serial adapter.
The recovery script pack was downloaded here since the download linked in the guide is dead:

I flashed with the latest firmware I could find "DH_IPC-HX2X3X-Rhea_MultiLang_PN_Stream2_V2.800.0000029.0.R.221220.bin".

run "printenv" in commands first to get the location, then run the dk du... commands with the proper location.

I only did so because the camera stopped functioning, one of them had a PoE power module go bad but worked over 12v, the other had a bad PoE module and was unresponsive but had network activity with 12v adapter and have came back alive after flashing. I've seen some compatible PoE replacement modules on AliExpress, but at around $15, I'm not going to bother
 
Last edited:
I used the network method recovery and did not have to pull out my serial adapter.
The recovery script pack was downloaded here since the download linked in the guide is dead:

I flashed with the latest firmware I could find "DH_IPC-HX2X3X-Rhea_MultiLang_PN_Stream2_V2.800.0000029.0.R.221220.bin".

run "printenv" in commands first to get the location, then run the dk du... commands with the proper location.

I only did so because the camera stopped functioning, one of them had a PoE power module go bad but worked over 12v, the other had a bad PoE module and was unresponsive but had network activity with 12v adapter and have came back alive after flashing. I've seen some compatible PoE replacement modules on AliExpress, but at around $15, I'm not going to bother
You rock! Thank you so much for sharing this. Saves me a lot of searching around. I'll give this a shot sometime this week. Appreciate you!