TVST-TR2908A PPPoE Settings Issue

[crawas]

I have an older TVST-TR2908 DVR (approximately 10 years old) that keeps enabling PPPoE by itself and restoring an old username and password, even after I’ve disabled PPPoE and cleared both fields.

This causes remote access through SuperLive Plus to stop working.

I’ve tried factory resetting the DVR, changing the administrator password, disabling UPnP, and repeatedly clearing and saving the PPPoE settings. The problem keeps returning.

Interestingly, the system logs show multiple entries saying “Remote Network Parameters — Edit PPPoE”, even though I didn’t make those changes. There are no corresponding remote login records.

I also tested disconnecting the DVR from the Internet while keeping it connected to my local network (by removing the default gateway). So far, PPPoE has stayed disabled, suggesting something Internet-related may be triggering it.

The DVR also occasionally freezes and requires a power cycle.

Has anyone experienced this with a TVT DVR or similar recorder? Could this be a firmware issue, a cloud/P2P service problem, or something else? Any suggestions for a permanent fix would be appreciated.

 

[TonyR]

Sounds to me like it was hacked. Being 10 years old and if the firmware has never been updated it's a prime candidate. And if uPnP and/or port forwarding in the router is in place it's extremely likely.

A Google search suggests these steps under "Core Remediation & Security Hardening" and includes a link to a f/w update on that exact model number. An Eyemax brand, it appears to be OEM'd by TVT.

 

[crawas]

There is no port forwarding that’s happening. I logged into my router and verified this. Upnp on the DVR is disabled. If it’s hacked, wouldn’t the factory reset take care of that?