Password changed itself?

[dannieboiz]

Weirdest thing today... one of my HikVision camera was showing wrong username/password in BI. I can still get to the interface but my password doesn't work. All 12 of my cameras have the identical password.

Port number remains unchanged so this tell me the camera wasn't factory reset but my pw no longer works.

 

[alastairstevenson]

I can still get to the interface but my password doesn't work.

If the firmware is earlier than 5.4.41 then @bp2008 's backdoor-based password reset tool should work - Hikvision camera admin password reset tool
Have you set up any external access to your cameras, eg 'port forwarding' ?

 

[bp2008]

Note that if you have "UPnP" enabled in your router, then your camera might have opened its own port. Either way, if it was accessible online then it probably got hacked by someone. In that case you would be lucky if all they did was change the password.

 

[alastairstevenson]

Weirdest thing today... one of my HikVision camera was showing wrong username/password in BI.

As per @bp2008 comment - before you change anything it may be worth checking if the outside world can see in using a service such as ShieldsUp! GRC | ShieldsUP! — Internet Vulnerability Profiling  

 

[dannieboiz]

thanks guys, I was able to use the took to reset the pw and is now back in.

I don't have UPNP enabled, checked shieldsup and all looks secured.

 

[heladera Viboral]

i am having the same problem

 

[fenderman]

i am having the same problem

See above, you are being hacked.