Recent content by username

  1. U

    Unauthenticated Remote Code Execution (RCE) vulnerability in Hikvision IP camera/NVR firmware (CVE-2021-36260)

    Hmmmm. You mean the PC ethernet cable connected to NVR and assigned an ip in camera’s range? Probably be easier to change one camera to LAN IP on NVR segment and test it with PC. Would that work? All cameras are same model/firmware. Anyway, cameras are 2142FWD and I’m fairly certain they are...
  2. U

    Unauthenticated Remote Code Execution (RCE) vulnerability in Hikvision IP camera/NVR firmware (CVE-2021-36260)

    I don't think that is a dumb question. I can always use helpful suggestions. The way your question is worded, the answer is 'yes'. I'm on a 192.168.x.x network and my NVR has an IP on that same network segment. The NVR is configured to use a non-routable IP for the cameras. The NVR is...
  3. U

    Unauthenticated Remote Code Execution (RCE) vulnerability in Hikvision IP camera/NVR firmware (CVE-2021-36260)

    I use a non-routable IP. That said, substituting your commandline for my own situation, here is one result, which defaults to port 80. So, all is good. % Python3.9 ~/Desktop/hikvision.py --rhost 192.168.254.4 --check Hikvision CVE-2021-36260 PoC by bashis <mcw noemail eu> (2021) Checking...
  4. U

    Unauthenticated Remote Code Execution (RCE) vulnerability in Hikvision IP camera/NVR firmware (CVE-2021-36260)

    Thanks. Result is "cannot establish connection". :) As expected, all is good.
  5. U

    Unauthenticated Remote Code Execution (RCE) vulnerability in Hikvision IP camera/NVR firmware (CVE-2021-36260)

    This didn't work using an iMac. Later I'll fire up my linux machine and try again. Admittedly I'm not proficient in this sort of stuff and additionally may have incorrectly installed Python3 on my Mac. I named the file hikvision.py rather than the name presented at GitHub. Python3 hikvision.py...
  6. U

    Unauthenticated Remote Code Execution (RCE) vulnerability in Hikvision IP camera/NVR firmware (CVE-2021-36260)

    Thanks for the updated link. My hardware is not on that list :), it seems to apply to newer hardware than I have. I earlier posted a typo for my NVR. It's a DS-7716NI-SP (16 port), circa 2015, not a 716NI The posted link also points to a FAQ which offered me useful info, including the fact...
  7. U

    Unauthenticated Remote Code Execution (RCE) vulnerability in Hikvision IP camera/NVR firmware (CVE-2021-36260)

    Failed to mention in prior post that my NVR is on connected to internet except for NTP. The cameras also do not see the internet.
  8. U

    Unauthenticated Remote Code Execution (RCE) vulnerability in Hikvision IP camera/NVR firmware (CVE-2021-36260)

    Adding my thanks to the great work on finding this vulnerability. One thing that has always bugged me is that I can never figure out which firmware updates to apply (USA equipment) from 2016. My NVR is DS-716NI-SP (16 port). The effected lists here do not have a '-SP'. My cameras are...
  9. U

    Confused about correct firmware file

    As OP, I asked this question 4 yrs ago. In case anyone is curious, the most recent firmware update for my 2142's was v5.5.82_190220_0 dated Dec 2019. It took me a very long time to discover that the updates for the camera are in files referred to as "IPC R6 Platform". My 7716 NVR is updated to...
  10. U

    Hikvision-VCA Search is not working

    It is in the log. And I can view it from the log. But that is not the same as VCA search. The search sez "no pictures found". Now I'm thinking that there is no room on my hard drive to store a "picture". The HDD is set up to overwrite and my 2 4g hdd's have several months on them that they...
  11. U

    Hikvision-VCA Search is not working

    Sorry I wasn't clear. I'm want to search on NVR. At one time VCA searching worked. My objective is to glance at my cameras on the NVR monitor (it's set to record events) and immediately see if there is a 'critter' in the intrusion area (outlined by a warning box). A secondary objective...
  12. U

    Hikvision-VCA Search is not working

    I have a HikVision NVR 7716 (v3.4.5 firmware, the latest avail for my NVR) & dome cameras 2142fwd. I can set up intrusion & line crossing but I cannot perform a VCA search on my NVR (no file found). That is, it is not recording at NVR any events. I have the NVR set to record events over 24hr/7...
  13. U

    Backdoor found in Hikvision cameras

    That is pretty much the way I have set it up. I don't use DHCP. My NVR is assigned static IP on the LAN network. The gateway is my router/firewall appliance (I use Netgate's pfSense) My camera's are assigned static IP's 192.168.254.x iVMS4200 on an iMac can access the camera's My safari...
  14. U

    Backdoor found in Hikvision cameras

    Sorry, I don't grasp what you are saying. Indeed the example is a HVision NVR /w (16) PoE ports. And yes, there must be 2 interfaces at play for each camera. And yes, 192.168.254.0 network is dedicated to cameras. That said, my belief is (was?) that 192.168.254.0/24 is non-routable. Perhaps...
  15. U

    Backdoor found in Hikvision cameras

    I do the same. For example, 192.168.254.x is a non-routable IP. A typical camera setting in NVR is 192.168.254.101 and the NVR on a 192.168.x.x network has no problem seeing that camera. And I can point my browser to that IP and see the camera. The camera is blocked at my firewall and does not...
Top