Hikvision NVR resets IP-camera login credentials

[Maxibon83]

I am helping out my neighbour with his camera setup. As he had problems with his installer after asking for his login credentials, to install extra camera's, I convinced him I am a nerd expert with these gadgets.

He has a Hikvision DS-7608NI-K2/8P with 5 Hikvision IP-camera's. I have installed 2 extra Dahua IP-camera's and a Reolink 2K+ videodoorbell PoE (5 MP). It works like a charm every time when I leave his house. They record and can be seen live on Hik-Connect app.

The problem

After an unknown time, between 1 day and 1 week, the Hikvision NVR resets my (ONVIF) IP-camera login credentials (username nvr and password DrieXr@den#R) from the Reolink 2K+ videodoorbell, in the Hikvision NVR software, to default username admin and password 12345. So, obviously it does not record anymore on the NVR and cannot be seen in the Hik-Connect app. It can still be viewed directly via the Reolink app as the login credentials there remain thesame, as it should.

Things I have tried

• Changing the username and password in the IP-camera settings on the Hikvision NVR, several times. Even to username admin, with a different password (not 12345). It reverts again after a few days to password 12345.
• Updating the Hikvision NVR firmware from 4.74.200 build 230522 to 4.74.205 build 230712. After a few days, it reverted again to username admin and password 12345.
• Deselecting a checkbox I found somewhere in the Hikvision NVR config that allows IP-camera password changes. After 1 day it reverted to the username admin and password 12345 again.

The username and password I setup for the Reolink is similar to the Dahua camera's, but the Dahua settings in the NVR do not change. So, it cannot be a chosen character problem with @ or #.
Giving in to the bug(?) and changing the login on the Reolink videodoorbell to admin with 12345 cannot be done because the Reolink software needs at least 8 characters.
Only 2 Hikvision camera's are connected to the NVR PoE ports. All the rest via seperate PoE switches.

Anybody has any idea what I can do next?

 

[alastairstevenson]

I'd speculate - without any evidence to back it up - that the Reolink doorbell itself is implicated in changing the password the NVR is configured to use for it.
Hikvision have not used admin/12345 for many years, they moved away from default credentials quite a while back.

The ONVIF standard does support the creation and modification of user credentials, that would normally be for applying to the connected device as opposed to the connecting device.
What I'm not sure about is if the connected device can use the same action on the connecting device.

Did you check the NVR log?
It may have some useful info.

 

[Revo2Maxx]

Personally I think it is an issue with your Characters.. While you said that the Dahua don't change something that makes me wonder is that you said you setup similar?

To be honest the Characters that you have or say that you are using are kind of problematic for ONVIF passwords. Or Can Be Main issue is that there can be issue parsing out the Characters. Like if you were to try and access an RTSP feed for the camera and using user and password in that URL things might @ Break the URL and # can be seen as a Fragment ID Try using a different password or the same password as your Dahua Cameras at least?

 

[Maxibon83]

Thanks @alastairstevenson for your reply. That is a good idea. I have the same Reolink videodoorbell at my house, just a slightly different firmware, so it might be good to swap them for a couple of days (with corresponding credentials) and see what happens. Not sure how to access the log on his NVR, but I might dig into that aswel.

The characters used could be a thing @Revo2Maxx , however, the password I use for the Dahua's is DrieXr@den#D which does not differ much from the Reolink's DrieXr@den#R. Just the last letter. But, it is worth a shot, I will try that first thing next week when I am back at home.

​