Hikvision camera admin password reset tool

[alastairstevenson]

It depends on what firmware vulnerabilities can be exploited.
These do eventually get fixed.

What firmware version does SADP show that the camera is using?

 

[kmheon]

V5.7.4 build 220509

 

[alastairstevenson]

V5.7.4 build 220509

That's new enough that the well-known vulnerabilities have been fixed, unfortunately.

 

[sofitek]

Try

 

[kmheon]

Try

Where do I get that software

 

[kmheon]

http://192.168.0.106/System/configurationFile?auth=YWRtaW46MTEK

 

[sofitek]

Where do I get that software

It's all here.

 

[alastairstevenson]

http://192.168.0.106/System/configurationFile?auth=YWRtaW46MTEK

View attachment 225371

The backdoor vulnerability that allowed a configuration file to be extracted without authorisation was fixed in firmware 5.4.5 and later.

It looks like you have missed this vulnerability too :

Security Notification - Command Injection Vulnerability in Some Hikvision products

Sep 26, 2021

www.hikvision.com

 

[kmheon]

well now what i do

 

[sofitek]

well now what i do

You can use this app instead.

 

[andrewclee]

Hi everyone, I managed to reset 12 out of 16 cameras, they had firmware 5.4.0 build 160530 so the wonderful reset utility worked a treat !!! Thank you so much to the creator. I'm now stuck on 4 remaining camera's, they have IP's but no gateway address and they are running firmware :-

Can anyone help me to reset these ? The code utility won't work, i suspect because of the new firmware....



ANY help appreciated , I'm going grey trying to get this sorted !!

 

[alastairstevenson]

I'm now stuck on 4 remaining camera's, they have IP's but no gateway address and they are running firmware

Does the NVR have new enough firmware that in the VGA/HDMI interface (and the newest in the web GUI) it has the facility to show in plaintext the password that has been configured to 'activate' the cameras on first connection?

Don't these cameras have a reset button next to the microSD holder?