HIK DS-7616NI bricked with new firmware 4.0

[FlyingSparki]

Im hoping to see if anyone has had this issue. any fixes.
Upgraded firmware on hik NVR DS 7616NI AU model.
pattern doesnt save, user name is whited out and cant enter.
NVR wont work. has Ver4.0 firmware now.
IVMS and SADP tools dont connect to NVR.

I can ping 192.0.0.64
i can use the TFTP tool (tftpserv ver1.0)and connect successfully. but then it looks for a file econt-vision-av2000
ip of computer is 192.0.0.128
connected directly and through router, same outcome.
cant seem to get rid of this file its trying to install. econt-vision-av2000

Hik suggests a serial port is needed to flash firmware, various other threads suggest TFTP tool.

im at a loss now..


[2021-01-26 11:47:10] TFTP server[192.168.150.181] initialized

[2021-01-26 11:48:55] Connect client[192.0.0.64] success

[2021-01-26 11:48:55] Open file[C:\TFTP\econt_Vision-AV2000] failure

[2021-01-26 11:48:58] Connect client[192.0.0.64] success

[2021-01-26 11:48:58] Open file[C:\TFTP\econt_Vision-AV2000] failure

[2021-01-26 11:49:02] Connect client[192.0.0.64] success

[2021-01-26 11:49:02] Open file[C:\TFTP\econt_Vision-AV2000] failure

 

[alastairstevenson]

Upgraded firmware on hik NVR DS 7616NI AU model.
pattern doesnt save, user name is whited out and cant enter.

You are not alone - the update has resulted in a corrupted configuration database.
It's a known bug.
Hikvision advise a specific update route to V4.x to avoid this problem.

i can use the TFTP tool (tftpserv ver1.0)and connect successfully. but then it looks for a file econt-vision-av2000

That won't work because it has a filesize limit of 32MB, the V4.x firmware is larger.
Scott Lamb's tftp updater clone gets round that size limit :

GitHub - scottlamb/hikvision-tftpd: Unbrick a Hikvision device (NVR or camera) via TFTP

Unbrick a Hikvision device (NVR or camera) via TFTP - scottlamb/hikvision-tftpd

github.com

cant seem to get rid of this file its trying to install. econt-vision-av2000

That's not a file it's looking for.
On bootup the NVR probes the network to discover devices to add to the 'found list'.
It just so happens that the method used to probe for ArecontVision devices (a UDP packet on a specific port) is very similar to the handshake probe used in the Hikvision tftp updater.
So the updater comments on it in a confusing way.

 

[FlyingSparki]

You are not alone - the update has resulted in a corrupted configuration database.
It's a known bug.
Hikvision advise a specific update route to V4.x to avoid this problem.


That won't work because it has a filesize limit of 32MB, the V4.x firmware is larger.
Scott Lamb's tftp updater clone gets round that size limit :

GitHub - scottlamb/hikvision-tftpd: Unbrick a Hikvision device (NVR or camera) via TFTP

Unbrick a Hikvision device (NVR or camera) via TFTP - scottlamb/hikvision-tftpd

github.com

That's not a file it's looking for.
On bootup the NVR probes the network to discover devices to add to the 'found list'.
It just so happens that the method used to probe for ArecontVision devices (a UDP packet on a specific port) is very similar to the handshake probe used in the Hikvision tftp updater.
So the updater comments on it in a confusing way.

thanks for that. do i need to run a .py file with a specific program?
as the zip is a .py file

 

[ZeeCam]

I flashed ok a few days ago using latest firmware from us Hikvision. Mine is international version 7616ni. Is this issue for au ones?

 

[alastairstevenson]

thanks for that. do i need to run a .py file with a specific program?

You need to install Python2 to run that Python program.

 

[FlyingSparki]

i installed python 3.8 32 bit but cant work it out just yet. where do I get python 2.0 from.
ill go looking

 

[FlyingSparki]

is the two tftp programs running side by side a bit better? cant find any settings to see what im doing wrong.
any tftp settings ?
I cant put screenshot up here......arrrhhhhh
I cant get python to run the file.
cmd can run python but cant get anything to work.

 

[alastairstevenson]

Upgraded firmware on hik NVR DS 7616NI AU model.

What's the exact model of NVR?
Just checking it doesn't have an RS232 interface on the back panel.

 

[FlyingSparki]

DS-7616NI

 

[FlyingSparki]

No rs232 on back.

 

[alastairstevenson]

No, that's only a partial model number, it covers several different series.

 

[FlyingSparki]

 

[alastairstevenson]

OK, so that's a DS-7616NI-I2/16P NVR model.

 

[FlyingSparki]

time to make a rs232 lead and try that.
Anyone have instructions?

 

[alastairstevenson]

If there is no RS232 interface on the back panel, there will be a TTL serial connector on the main board.
You'll need a couple of things to hook up to the serial console :

A 4-pin 1.5mm JST ZH wired connector. Widely available on eBay, usually in 10-packs.
A USB to TTL serial adaptor, such as a PL2303TA-based one, again widely available on eBay.

The connector is likely to look like this :

Hikvision NVR DS-7804N-E1/4P Bricked

Hello, i have NVR DS-7804N-E1/4P bricked when i flash wrong firmware DS-7604NI for it. So now it only boot to Logo then bip bip and auto restart. I tried flash TFTP very many time by set IP of my PC to 192.0.0.128 / subnet 255.255.255.0 and turn firewall is off. But no thing flashable although i...

ipcamtalk.com

 

[FlyingSparki]

which one might be the serial?
red wire is connected to 3.3V other end is ground

 

[FlyingSparki]

i think i see data but its gibberish and not readable, changed tx and rx no better.
control U does not seem to work.

 

[alastairstevenson]

i think i see data but its gibberish and not readable, changed tx and rx no better.

Which pins did you connect to?
Did you connect according to post #4 here, the middle 2 pins -

Hikvision NVR DS-7804N-E1/4P Bricked

Hello, i have NVR DS-7804N-E1/4P bricked when i flash wrong firmware DS-7604NI for it. So now it only boot to Logo then bip bip and auto restart. I tried flash TFTP very many time by set IP of my PC to 192.0.0.128 / subnet 255.255.255.0 and turn firewall is off. But no thing flashable although i...

ipcamtalk.com

And baud is set to 115200 8 bits no parity?

 

[FlyingSparki]

rightO
changed to another adapter. finally in and can request commands etc help..
tried hik tftp sever, not working
tried ping 192.0.0.64 from computer 192.0.0.128 nothing. 100% loss
tried ping from HIK cmd line nothing..
tried tftp32, error 11001, not sure of any settings really. just trying all.
almost there. anyone got anything to try please..

 

[alastairstevenson]

changed to another adapter. finally in and can request commands etc help..

That's good, you've made progress.
Now, here is what you can do :

Drop the digicap.dav from the same firmware you last installed in to the folder where tftp32 is installed.
Start the tftp server.
Note down the IP address of the PC.
With the NVR powered off, start PuTTY and open the saved setting that you've been using.
Power on the NVR and very quickly (or even start before you power on the NVR) type Control-U to interrupt the bootloader.
You will enter the update menu.

At this menu you will need to -
Specify the PC IP address.
Pick an IP address for the NVR to use temporarily, in the same range as the PC.
Confirm you want to do the update.
Watch the progress, and when it completes and the NVR reboots, it will be in the 'Inactive' state where you need to specify your own strong password.
This is most easily done with SADP, especially if you also need to change the NVR IP address back to what it used to be, away from the default value.

Good luck!