H264 H.264 DVR password reset embedded linux Security camera CCTV
I bought this dvr bundle a few months ago.
http://www.monoprice.com/Product/?c_id=110&cp_id=11019&cs_id=1101901&p_id=9888&seq=1&format=5
Set it temporarily in my office for port forwarding / experimenting. Everything was working fine.
Put it to the side and pulled it back out to start setting up cameras in their correct locations.
Went to admin the DVR and I seemed to have forgotten the password.
I first just tried removing the coin battery like on a PC thinking that would wipe the config back to factory defaults. Interesting, the time DID reset back to 2008. But still couldn't get in.
Let it sit for hours, still no luck. Monoprice said the superuser password is 020818 but that didn't work either (from the dvr connected to a VGA monitor and from the web interface).
Looking on the web, I found apps that create a temp password from the clock timestamp for some dvrs.
Tried those and still didn't work.
The book says it's running embedded Linux. Any advice on how to get in to the box at this point? How many password attempts does it take then the box is locked and then for how long?
I tried telnet to the IP of the box, and got a can't connect on port 23 message (interesting - I set a static IP and that has stayed also.. and the clock only reset one time back to 2008. Even without the coin battery in there, it's keeping clock setting, IP settings, etc.
http://www.monoprice.com/Product/?c_id=110&cp_id=11019&cs_id=1101901&p_id=9888&seq=1&format=5
Set it temporarily in my office for port forwarding / experimenting. Everything was working fine.
Put it to the side and pulled it back out to start setting up cameras in their correct locations.
Went to admin the DVR and I seemed to have forgotten the password.
I first just tried removing the coin battery like on a PC thinking that would wipe the config back to factory defaults. Interesting, the time DID reset back to 2008. But still couldn't get in.
Let it sit for hours, still no luck. Monoprice said the superuser password is 020818 but that didn't work either (from the dvr connected to a VGA monitor and from the web interface).
Looking on the web, I found apps that create a temp password from the clock timestamp for some dvrs.
Tried those and still didn't work.
The book says it's running embedded Linux. Any advice on how to get in to the box at this point? How many password attempts does it take then the box is locked and then for how long?
I tried telnet to the IP of the box, and got a can't connect on port 23 message (interesting - I set a static IP and that has stayed also.. and the clock only reset one time back to 2008. Even without the coin battery in there, it's keeping clock setting, IP settings, etc.
I don't see jumpers. I am hoping for some 'press and hold this while turning on' type of trick to do a hard reset...
ASKER CERTIFIED SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Gerwin - I put in another drive, it said it needed to format, restarted... and I entered the 000000, 111111, 519070 and 020818 codes. none worked : (
Yeah, that link seems like a similar product. Were there FAQs or technical info? Just seemed like generic info?
Yeah, that link seems like a similar product. Were there FAQs or technical info? Just seemed like generic info?
Found another manual here:
http://194.150.201.35/cnmsecure/support/downloads/H264%204Ch%20Manual.pdf
with some bad news in there:
"Note: It is important to remember the password because there is no facility to reset the password."
To get your clock running properly, you should place a new coin battery, advice from the same manual...
http://194.150.201.35/cnmsecure/support/downloads/H264%204Ch%20Manual.pdf
with some bad news in there:
"Note: It is important to remember the password because there is no facility to reset the password."
To get your clock running properly, you should place a new coin battery, advice from the same manual...
See attached image, can you find a JP1 on your DVR board? Shorting that should reset the admin password.
thanks for the info. Interesting / I've been wondering about this: on page 8 of that manual link shows the 2 line login I see -device ID and password. So there's no way to indicate if you are an admin or user, except for the password. but that blurb you posted shows the same password for both user / admin : )
The only unused connector I can see is a 3 contact connector in the bottom left of the picture I posted - white. Not sure if 1 pin is unused or just short all 3 pins?!
The only unused connector I can see is a 3 contact connector in the bottom left of the picture I posted - white. Not sure if 1 pin is unused or just short all 3 pins?!
>> Not sure if 1 pin is unused or just short all 3 pins?!
JP are usually JumPers, so just 2 pins. Can you take a close look at the board? JP1 should be printed there somewhere.
It looks like it is near the blue connector on the right hand side of the image you posted. Can you post a photo of the back side as well?
JP are usually JumPers, so just 2 pins. Can you take a close look at the board? JP1 should be printed there somewhere.
It looks like it is near the blue connector on the right hand side of the image you posted. Can you post a photo of the back side as well?
damn!!! there's 2 contacts there and I see it says JP1 near there!?
could it be so simple?!
So what do you think? power disconnected, no battery. Short the 2 contacts... apply power and let it boot up? keep it shorted for 30 seconds.. then disconnect power, disconnect jumper then connect power again and boot it up?
kinda just want to talk about it rather than actually do it - don't want to be disappointed. till I do it I think this may be it!
could it be so simple?!
So what do you think? power disconnected, no battery. Short the 2 contacts... apply power and let it boot up? keep it shorted for 30 seconds.. then disconnect power, disconnect jumper then connect power again and boot it up?
kinda just want to talk about it rather than actually do it - don't want to be disappointed. till I do it I think this may be it!
I took a jumper across the 2 pads next to the blue connector, powered up unit, waited 30 seconds, powered down, removed jumpers and powered up.
can't get in. there's actually 4 pads in that area.....
The battery was out when I did that. jumper when powered off but with battery?
2014-02-10-14.12.31.jpg
2014-02-10-14.12.20.jpg
can't get in. there's actually 4 pads in that area.....
The battery was out when I did that. jumper when powered off but with battery?
2014-02-10-14.12.31.jpg
2014-02-10-14.12.20.jpg
Resetting should be done with power on (be careful), but about the photo: I mean a photo from the back side of the board, opposite to JP1. Don't know if his is possible, the board is probably mounted in a casing. You've probably opened the device by removing a the top? Can you look at the bottom or do you have to remove the complete board then?
yeah, the board is screwed down to the chassis. what are you hoping to see from the bottom of the board?
I'll wind up causing more damage with all that I am doing already : )
you see the 2 pads on the other side of JP8? those don't seem to be labeled? Or is that JP1 going from the pads under it to the pads to the left of the JP8!?
I'll try that - short out across those pads on the right and left of JP8?
Yeah, the traces on the bottom would let you know if that's the case or not....
back in a few minutes.
I'll wind up causing more damage with all that I am doing already : )
you see the 2 pads on the other side of JP8? those don't seem to be labeled? Or is that JP1 going from the pads under it to the pads to the left of the JP8!?
I'll try that - short out across those pads on the right and left of JP8?
Yeah, the traces on the bottom would let you know if that's the case or not....
back in a few minutes.
OK, that didn't seem to do anything. With my VOM from harbor freight, set to low resistance, it shows 1 ohm when I short the leads. Touching any 2 pads gets me 1.1 ohm, so are the trace goes to all 4 of them in series?
I took a few more pictures. There's a model number on the bottom of the unit, but googling that just shows some other no name firms selling it. no manufacturer info I could find.
And trying to unscrew the main board would require unscrewing a couple other boards it's connected to. Not sure if it would help much, although I can see 'rev a' on the bottom of the board from that picture of the bottom of the case.
and I see these pics aren't that clear : (
2014-02-10-17.11.55.jpg
2014-02-10-17.10.19.jpg
2014-02-10-17.10.05.jpg
2014-02-10-17.09.43.jpg
I took a few more pictures. There's a model number on the bottom of the unit, but googling that just shows some other no name firms selling it. no manufacturer info I could find.
And trying to unscrew the main board would require unscrewing a couple other boards it's connected to. Not sure if it would help much, although I can see 'rev a' on the bottom of the board from that picture of the bottom of the case.
and I see these pics aren't that clear : (
2014-02-10-17.11.55.jpg
2014-02-10-17.10.19.jpg
2014-02-10-17.10.05.jpg
2014-02-10-17.09.43.jpg
From the photo's, I'm not really sure if this device even has a JP1. Compare to the J8 you see on the board, it is a reserved place for a connector to supply 5V power to the device. As you can see it is not used, there is no header to connect something to and the holes in the board are soldered through. When looking at JP1, I only see one hole that soldered through as well. So that's why I'm not sure that there is a JP1 on your board. It seems like a very generic design for a DVR that is used by many companies, thats why you find several 'default' passwords when searching.
thanks for your help. I got the vendor to let me return it. Problem solved : )
That's a way to solve it as well :) Thanks for the detailed feedback you gave!
Actually it's a crap thing to do. What about the rest of us with same issue, that have been reading the whole thing thinking the answer may be withing our grasp? This thread is incomplete and useless and should be labeled as such or deleted.
ASKER
Interesting - the box was unplugged overnight / no battery. System started with time saying oct 11, 2008 4:25PM. Kinda random time? Last night, after being unplugged, it had the same date and a 5 PM time (I forget the minutes - it was late : )
2014-02-09-12.16.18.jpg