01304 827609 info@use-ip.co.uk Find us

Firmware Hikvision declare new vulnerabilities in mass email blast sent Saturday 18th September 2021

CliveC

Member
Messages
74
Points
8
Is there any update from Hikvision on when they will complete the firmware releases for affected cameras? I believe they stated 24 September was the date they expected to do that, however it is now well past that date and many of the cameras affected still do not have updated firmware.
 

jugglerb

New Member
Messages
2
Points
1
Hello - so if I have my Hikvision NVR and Cameras behind my talktalk broadband router (which supposedly has its own in built firewall) is there any risk ? I dont see how anyone can get beyond my router to get to my cameras. I do use HikConnect though...???
 

Jan J

Member
Messages
120
Points
18
Hello from across the pond!
As I posted in another thread, I have not found DS2CD2042WD-1 cameras on the most recent list of affected cameras, And camera firmware is older than the recent security issue.
I’ve sent emails and web requests on the model not being listed, to USA Hikvision Sales & Support a month ago. Without a reply since then.

Now with that said. I do have inbound and outbound ‘traps’ set for the IP’s of these cameras in my firewall, and there has not been any ‘Hits’ to these rules in 2 years.
(Edit after Dan's post below) I do not use Hik-Connect.. I do, however, use IVMS-4500 to view cameras from within the LAN, but no external (WAN) access has been set up

Has there been any updates on this model: DS2CD2042WD-1
Thank you!
 
Last edited:

Dan

Administrator
Staff member
Messages
2,244
Points
113
Hi @jugglerb

If the cameras are not accessible from outside your local network then we would think there is minimal risk to your cameras, but as you are using Hik-Connect the safest thing would be to check you are running the latest firmware and update if not.

Hi @Jan J

In the UK/EU the 2042WD-I model is covered by the R0 firmware and there has been a patched firmware released - V5.4.800 210813 - this may work with your camera, but as a US model we cannot guarantee this and if it does install you may see glitches/performance issues as the firmware is not fully compatible.
 

Jan J

Member
Messages
120
Points
18
Thanks... However the Readme First indicates it covers:
DS-2CD1?32
DS-2CD2?22
DS-2CD2?12
DS-2CD2?31
cameras.... Are you certain it covers the DS-2CD2042WD-1 camera?

Now I did go back to Hikvision USA firmware site and check the 2CD2012 and 2CD2022 and 2CD2042 versions, and yes, they all use same version firmware, but the version listed at USA Site is Firmware: IPC_R6_EN_STD_5.5.82_190220 and which, though older has a higher Version number than the link you suggested... though at the USA site it says that version is not guaranteed to work also .... !!??!! Now that is confusing and why:
I'm presently running V5.5.53 build 180730 on my 12 cameras, with no "Hits" seen on rules in firewall blocking inbound and outbound access.

Yes, I have been informed before that different cameras have different Region firmware... and I'm trying valiantly to follow the rules...

It would have been far simpler for me , if USA Support or USA Sales would have answered me...

Do you have an email to USA Support that you know they will answer to? USA is not responding to Web communications... Thanks again...... Actually I'm quite pleased with the quality and stability of the Hikvision cameras....
 
Last edited:

Dan

Administrator
Staff member
Messages
2,244
Points
113
Hi @Jan J

The 2042WD-I model is an odd model because it is one of the very few 4MP (2x42) models that is supported by the R0 firmware because once the 2x42FWD models came in they started using the R6 firmware, I hadn't initially noticed that the firmware version the US site is promoting for the 2042WD is the R6 firmware, which might further suggest that in the US the model is labelled R6 rather than R0 and the UK/EU R0 firmware likely won't work.

For the time being, I would just stick with the latest firmware that is being suggested for the 2042WD on the US site because that is also the same latest firmware for the UK/EU R6 models.

Unfortunately, as we do not have any US customers we do not regularly contact Hikvision US so don't have any direct support contact details. Their Contact Us section does include phone numbers so maybe a last-ditch option would be to actually phone them if you cannot get a response via email.
 

Jan J

Member
Messages
120
Points
18
I'm getting more -- Good, In Depth information from this site than I ever got from USA site....

The one time I did call USA Support, nearly 3 years ago, we never got to subject at hand, but instead got embroiled into camera serial number being not registered.. and when I gave the number to him off camera, including a picture of it, he said it was invalid camera and would not go further without a valid serial number.... Also said loading firmware onto camera would destroy the camera.....

I then found this site, and Phil explained the issue I had (which had been fixed in later firmware, which loaded successfully, by the way!)... and I've been here ever since....

I've got 12 camera's now... I'll try USA support Phone # again.... but I'm not holding my breath..... If you know what I mean.... !!
 

Jan J

Member
Messages
120
Points
18
Update on my findings... Getting ready for the phone call....
One of the 12 cameras I have came with latest USA firmware: 5.5.82 Build 190220 installed.
That's the one on USA Support site says is not guaranteed to work.. Yet it came installed on camera...
Looking at the pdf release notes in the zip file for Build 190220, the release notes indicate build 180427 yet camera Configuration settings reports: 190220 ???

Does anyone have access to the pdf file release notes for 5.5.82 Build 190220?

I see nothing in Menus or 2 years of operation to indicate a operational difference between 5.5.53 Build 180730, and 5.5.82 Build 190220

The Zip file for 5.5.53 did not contain a pdf file of release notes.... Would anyone have those also?

Thank You
 

jugglerb

New Member
Messages
2
Points
1
Hi @jugglerb

If the cameras are not accessible from outside your local network then we would think there is minimal risk to your cameras, but as you are using Hik-Connect the safest thing would be to check you are running the latest firmware and update if not.

Hi @Jan J

In the UK/EU the 2042WD-I model is covered by the R0 firmware and there has been a patched firmware released - V5.4.800 210813 - this may work with your camera, but as a US model we cannot guarantee this and if it does install you may see glitches/performance issues as the firmware is not fully compatible.
Thanks Dan
 

Jan J

Member
Messages
120
Points
18
Cannot find a USA Version of that code.
Would you have a link?

PS: HiKvision USA download portal does not see that code applied to other USA cameras seen in the UK read me first filename your link.
 
Last edited:
Top