DS-9632NI-I8 Firmware Update (Bricked)

H

Hik2love

n3wb
Sep 26, 2018
13
3
USA
Hi All,
I did a rookie mistake and updated my DS-9632NI-I8 firmware to the most recent (v4.5xxx) downloaded from Hikvision website. I failed to verify if the NVR was currently on 3.42 prior. Anyhow, the update went thorugh just fine, however the username drop down when connected directly to the NVR shows a bunch of random symbols (attached screenshot). I tried my admin password on every username listed and nothing seems to work. I can see the cameras are still recording, based on the 16 screen view when i right click outside the logon window. I can also see the port is open on the NVR using a port scanning (HTTP and HTTPS) however I am receiving website error when attempting to connect to the WebGui.

I've tried calling HikVision support Tier 1 and Tier 2 and they both just say im screwed and to buy a new NVR.

I stumbled across multiple post regarding the use of HikVision TFTP to flash the firmware, but am running into an issue to where its not sending the Firmware to the NVR. It just loops on the connections successful even after waiting 10 minutes it never completes.

Hoping someone else here has any other ideas? Is there another TFTP software maybe, I noticed the one from hikvision was meant for Windows XP, so not sure if me using it on my windows 10 laptop had anything to do with it not completing the flashing of the firmware?

Logon.jpg
TFTP.jpg
 
Hik2love said:
I did a rookie mistake
Click to expand...
Not your fault - it's a bit of a flaw in the Hikvision upgrade process, not handling the old configuration database restructure fully.
It took them quite a while before they published the advisory - and even when they did - how would you know it was there?
Lots of people got caught out by this.

Hik2love said:
I stumbled across multiple post regarding the use of HikVision TFTP to flash the firmware, but am running into an issue to where its not sending the Firmware to the NVR. It just loops on the connections successful even after waiting 10 minutes it never completes.
Click to expand...
The I-series firmware is too large for the 32MB filesize limit of the Hikvision tftp up[dater program.
To get round this problem, you can use the Scott Lamb Python2 clone of the tftp updater.
github.com

GitHub - scottlamb/hikvision-tftpd: Unbrick a Hikvision device (NVR or camera) via TFTP

Unbrick a Hikvision device (NVR or camera) via TFTP - scottlamb/hikvision-tftpd
github.com github.com
 
alastairstevenson said:
Not your fault - it's a bit of a flaw in the Hikvision upgrade process, not handling the old configuration database restructure fully.
It took them quite a while before they published the advisory - and even when they did - how would you know it was there?
Lots of people got caught out by this.


The I-series firmware is too large for the 32MB filesize limit of the Hikvision tftp up[dater program.
To get round this problem, you can use the Scott Lamb Python2 clone of the tftp updater.
github.com

GitHub - scottlamb/hikvision-tftpd: Unbrick a Hikvision device (NVR or camera) via TFTP

Unbrick a Hikvision device (NVR or camera) via TFTP - scottlamb/hikvision-tftpd
github.com github.com
Click to expand...

thank you very much for the response. So i came across this the other Day as well and have Given it a try but i am running into a line 1 error when using python 2.72-2.77 and line 53 error whej using python 3.7. All were downloaded from the python website. I can post a screenshot later tonight when I’m back on my laptop.

Edit:

here is screenshot of the error using that script I run into;

1663979626211.png
 
Last edited:
Hik2love said:
i am running into a line 1 error when using python 2.72-2.77
Click to expand...
I've not used this under Windows, only Linux, and only from the command-line as opposed to interactively.
And it definitely requires Python2

Suggestion : try running it like this
python2 hikvision_tftpd.py --filename digicap.dav --server-ip 192.0.0.128
 
Download any TFTP they all work same. Prefferably windows application, since some python apps are linux exclusive , and wont work with win enviroment
 
trempa92 said:
Never done the process without putty or securecrt,
Click to expand...
Yes, the NVR transmits a UDP probe on a specific port to a specific IP address, the tftp updater program responds on a different port, and that's the proprietary handshake that's conducted which enables the tftp-based transfer to start the update process.
But the method via the serial console is more reliable.

@Hik2love - if you have an RS-232 interface (not TTL serial, that's different) and a null modem cable to hook up to the DB9 connector on the back panel, you can get direct access to the update command to apply the firmware and reset the device so you can access it.
 
alastairstevenson said:
Yes, the NVR transmits a UDP probe on a specific port to a specific IP address, the tftp updater program responds on a different port, and that's the proprietary handshake that's conducted which enables the tftp-based transfer to start the update process.
But the method via the serial console is more reliable.

@Hik2love - if you have an RS-232 interface (not TTL serial, that's different) and a null modem cable to hook up to the DB9 connector on the back panel, you can get direct access to the update command to apply the firmware and reset the device so you can access it.
Click to expand...

Darn, I do not have a RS-232 and a null modem cable.. I purchased the TTL serial to USB from amazon.
 
Hik2love said:
Hey all, not sure why my reply before didn’t post. But thank yoh for all the help. I did get this resolved using the suggested tftp by Scott lamb. It worked flawlessly. All is good now and i was able to finally upgrade to v4.6 thanks again.
Click to expand...
Hik2love
do you you have Scott lamb TFtpd guide how to do like how to use /
thanks
 
Check post number 6 for the typical command-line.
After you've downloaded and unzipped the firmware into the program folder on the PC, start the program as above and power on the device.
Have both the PC and the device each wired to their switch or router ports as normal.
Power on the device and hopefully it performs the handshake and connects.
Good luck!
 
how to change ip address 192.168.1.128 because my camera set on 192.168.1.64 (bricked)
and when i ran the program it shows
error:Ardess 192.0.0.128: 9978 not available
 
jagg56 said:
when i ran the program it shows
error:Ardess 192.0.0.128: 9978 not available
Click to expand...
That error would occur when the PC IP address is not set to 192.0.0.128

jagg56 said:
how to change ip address 192.168.1.128 because my camera set on 192.168.1.64 (bricked)
Click to expand...
The IP address that's used when the bootloader is probing for the tftp updater is not the same as the IP address used when the device attempts to boot up.
 
You must log in or register to reply here.
Top Bottom