Hikvision NVR factory reset - Need some help

A

Amir.Idris

Young grasshopper
Mar 23, 2022
40
8
Birmingham
Hi All

I have an issue where a NVR ha been factory reset and now not able to view any cameras, platform access offline and it looks like NVR is not connected either as default gateway IP address is missing. The issue I have I cannot add default gateway or tick DHCP for it to talk to the router. I have attached the model of the NVR and its current firmware version, along with setting area, any ideas if I upgraded the firmware it would fix the issue with DHCP and default gateway ? (also need help obtaining the latest firmware version file)
 

Attachments

  • IMG_8311.jpg
    IMG_8311.jpg
    688.5 KB · Views: 34
  • IMG_8314.jpg
    IMG_8314.jpg
    755.5 KB · Views: 27
  • IMG_8315.jpg
    IMG_8315.jpg
    883.3 KB · Views: 20
Amir.Idris said:
I have an issue where a NVR ha been factory reset and now not able to view any cameras, platform access offline and it looks like NVR is not connected either as default gateway IP address is missing.
Click to expand...
A dumb question - did you 'Activate' the NVR after resetting it to factory defaults?
If not, it will still be in the 'Inactive' state awaiting Activation.

Check the status with SADP, 'Activate' if required, and set the new password and IP configuration as needed.

SADP Tool

Locate Hikvision brand cameras within the same network, including their IP address and port.
www.ipcamtalk.com www.ipcamtalk.com

Firmware here :
But don't go straight to V4.x or the configuration may get scrambled.
 
alastairstevenson said:
A dumb question - did you 'Activate' the NVR after resetting it to factory defaults?
If not, it will still be in the 'Inactive' state awaiting Activation.

Check the status with SADP, 'Activate' if required, and set the new password and IP configuration as needed.

SADP Tool

Locate Hikvision brand cameras within the same network, including their IP address and port.
www.ipcamtalk.com www.ipcamtalk.com

Firmware here :
But don't go straight to V4.x or the configuration may get scrambled.
Click to expand...


Thanks for the info, no I have not activated it. If I connect a laptop to a NVR POE port can I use the SADP tool to activate it this way? . my current issue is NVR not connect to the my home network due to default gateway IP address missing and that field is greyed out so I cannot add IP address. Another silly question can I activate it somewhere in the NVR settings itself ? (Sorry I am an IT engineer but know very little about CCTV setups) really appreciate all the help so far :)
 
alastairstevenson said:
If the NVR is Inactive, you need to Activate it.
Just run SADP to show the status and Activate if needed, then change the IP settings.
Click to expand...
HI Alistair - I can confirm its active, I enabled DHCP and also manually changed the IP address and added default gateway too via SADP tool, rebooted NVR its still not picking up the default gateway and still no cameras (see pictures attached)
 

Attachments

  • IMG_8327.jpg
    IMG_8327.jpg
    756.6 KB · Views: 22
  • IMG_8328.jpg
    IMG_8328.jpg
    798.8 KB · Views: 19
  • Like
Reactions: Temiloluwa and Flintstone61
DHCP provides IP address, gateway address, DNS addresses automatically.

If DHCP is disabled, all those settings must be added manually, but they must be consistent. In your screenshot, the gateway address is not on the same network segment as the IPV4 address / subnet mask, so it is not valid.
 
  • Like
Reactions: Flintstone61
alastairstevenson said:
DHCP provides IP address, gateway address, DNS addresses automatically.

If DHCP is disabled, all those settings must be added manually, but they must be consistent. In your screenshot, the gateway address is not on the same network segment as the IPV4 address / subnet mask, so it is not valid.
Click to expand...
I did also enable dhcp via SADP thinking it would pick up the correct IP address, subnet mask etc, rebooted the nvr but made no difference what so ever, dhcp still not ticked on the nvr settings area.
I will try adding the correct subnet ip addresses manually via SADP to see if that works.
 
Hi Alastair
NVR is now back online and I can ping it and can also connect on web browser via IP address (see attached SADP IP address screenshot attached)

Next problem..........all the cameras are offline showing password error, any ideas how I can get these working ?
 

Attachments

  • camera error.jpg
    camera error.jpg
    112.5 KB · Views: 22
  • SADP IP settings.jpg
    SADP IP settings.jpg
    36.4 KB · Views: 20
  • Like
Reactions: alastairstevenson
alastairstevenson said:
Well that's some useful progress.
Make sure the NVR password is the same as it was when the cameras were connected, and they should reconnect.
Click to expand...
Thanks Alastair for the help so far.

I have tried various passwords (sorry it my neighbours system) and he cannot remember exactly what the password was set to when the CCTV company originally installed the system. The CCTV company are no longer around. Is there anyway to reset the cameras without climbing up to the camera devices them self ?
 
Amir.Idris said:
Is there anyway to reset the cameras without climbing up to the camera devices them self ?
Click to expand...
There may be - depending on the firmware versions of the cameras.
Connect a PC with SADP to an unused NVR PoE port and see what SADP shows for the camera models and their firmware versions.
Screenshot the result and attach here.
 
Amir.Idris said:
see attached
Click to expand...
That's clear.
I'd hoped that maybe the firmware / models were old enough to have the 'Hikvision backdoor' which would allow the camera password to be extracted.
But V5.5.80 is too new for that.

And I think I'm right in saying that the G0 series of Hikvision cameras didn't have this vulnerability in the 5.5.80 firmware :

Unauthenticated Remote Code Execution (RCE) vulnerability in Hikvision IP camera/NVR firmware (CVE-2021-36260)

This article has been written for a technical audience.
watchfulip.github.io watchfulip.github.io

from what I can see in Hikvision's eadvisory, and the use-ip.co.uk affected list.
Maybe someone can confirm?

It might be a bit impractical for you with a neighbour system - but there is a PoC from @bashis that can test for that vulnerability.
It would involve installing Python on a PC, changing the PC IP address, and connecting it up to a NVR PoE port.
 
  • Like
Reactions: Amir.Idris
alastairstevenson said:
That's clear.
I'd hoped that maybe the firmware / models were old enough to have the 'Hikvision backdoor' which would allow the camera password to be extracted.
But V5.5.80 is too new for that.

And I think I'm right in saying that the G0 series of Hikvision cameras didn't have this vulnerability in the 5.5.80 firmware :

Unauthenticated Remote Code Execution (RCE) vulnerability in Hikvision IP camera/NVR firmware (CVE-2021-36260)

This article has been written for a technical audience.
watchfulip.github.io watchfulip.github.io

from what I can see in Hikvision's eadvisory, and the use-ip.co.uk affected list.
Maybe someone can confirm?

It might be a bit impractical for you with a neighbour system - but there is a PoC from @bashis that can test for that vulnerability.
It would involve installing Python on a PC, changing the PC IP address, and connecting it up to a NVR PoE port.
Click to expand...
I think best option for now would be to climb up and reset the cameras themselves, is it matter if just resetting and then plug and play or do I need to add them ?
 
Assuming they have the hatch under which is the reset button -
The process is :
With the camera powered off, ie the LAN cable disconnected (at the NVR by another person?) Keep the reset button pressed, reconnect the cable to power it on, wait about 30 seconds or so and release the button.
This will reset the camera to 'Inactive', the NVR will activate it and automatically add, if the channel is still in the default 'Plug and Play' mode .
 
alastairstevenson said:
Assuming they have the hatch under which is the reset button -
The process is :
With the camera powered off, ie the LAN cable disconnected (at the NVR by another person?) Keep the reset button pressed, reconnect the cable to power it on, wait about 30 seconds or so and release the button.
This will reset the camera to 'Inactive', the NVR will activate it and automatically add, if the channel is still in the default 'Plug and Play' mode .
Click to expand...
Thanks, its gong to take while, will report back as soon as I can
 
  • Like
Reactions: alastairstevenson
Hi Alistair, update........4 out of the 5 are working after reset, the one camera I was messing about with and changed password before you suggested reset and I have reset this one too but it just sits and identifying, I have also rebooted the NVR and still no joy with this one camera, any ideas ?
 
Amir.Idris said:
Hi Alistair, update........4 out of the 5 are working after reset, the one camera I was messing about with and changed password before you suggested reset and I have reset this one too but it just sits and identifying, I have also rebooted the NVR and still no joy with this one camera, any ideas ?
Click to expand...
sorry also to add I moved into another POE port in the NVR and still no good
 
Amir.Idris said:
the one camera I was messing about with and changed password before you suggested reset and I have reset this one too but it just sits and identifying,
Click to expand...
Suggestion :

Check the status of that camera using SADP with a PC attached to an unused NVR PoE port.
If it's 'Inactive', activate it with the NVR admin password.

If you already know the camera password :
You could try changing the mode of the NVR PoE channel to Manual instead of Plug&Play so that you can set the password.
Then change the camera IP address using SADP to match that of the chosen NVR PoE channel.
 
You must log in or register to reply here.
Top Bottom