Hikvision DVR reboot loop unable to load firmware via TTL serial TFTP server console

[z0re]

Hi everyone,
I’m trying to load firmware onto a Hikvision DVR iDS-7204HUHI-K1/4S(C) that is currently stuck in a reboot loop. When the DVR powers on, it shows the Hikvision logo briefly and then restarts repeatedly. I’ve previously recovered similar DVRs using the serial TTL method, which has worked well in the past. In this case, I connect via the serial console, press Ctrl+U during startup, and normally enter the command:

• setenv ';update'

However, on this DVR the console behaves differently. When I enter any command, the console simply returns a blank line and does not start the update process (see attached image). Even basic commands like help or ? produce a blank line output. I’ve also tried a couple of alternative commands that I found mentioned online:

• <span>setenv bootcmd 'tftp 0x42000000 uImage; update'</span>
• <span>setenv bootcmd ';update'</span>

Unfortunately, these behave the same way — the console just returns a blank line and nothing executes. Has anyone encountered this issue with any other DVRs or seen a console behave like this before? If so, is there a known way to resolve it or trigger the firmware update process? Many thanks in advance for any help.

 

[alastairstevenson]

It sounds like you've bumped into another of Hikvision's 'security by obscurity' ploys.
If they've just replaced 'setenv' with another word, I've not come across it, sorry.
It will be interesting to see if anyone has figured this out ...