Dahua IPC-HFW2100 Extra User Accounts (including admin)

[akelley 0]

So I decided to test one of these out for myself and have to admit I'm impressed with the quality considering the sub $200 price.

 

But one thing that does concern me is that on my camera there are two admin accounts, and one user account by default (admin, 888888, and 666666). When I went to remove the two numerically named accounts, it would not let me. Does everyone else have these as well? It concerns me because I can't change the password or remove the accounts so in my opinion, that's a serious security issue as anyone with the default passwords would be able to access the camera and potentially change settings using the 888888 admin account.

 

I haven't contacted Empire Security yet as I wanted to see if anyone else has the same issue, and/or a justification for why these cameras are set up this way. I really don't like the idea of "backdoors" into my equipment, and I can assure you, neither would my clients.

[goldserve 0]

Same here. Let me know if you find a solution to these accounts.

[akelley 0]

No one else has these accounts, or are concerned?

 

Buelwinkle, I know you have tested these cameras. Any thoughts on having a default admin account you can't disable or change the password on?

[buellwinkle 0]

I can't delete them either, I just changed the passwords on them and secure enough for me. Also, consider that most people won't expose the port on the internet for each of their cameras and use an NVR or NVR software to control secure remote access.

[finalwish 0]

I can't delete them either, I just changed the passwords on them and secure enough for me. Also, consider that most people won't expose the port on the internet for each of their cameras and use an NVR or NVR software to control secure remote access.

 

That's exactly what I did. I couldn't delete those accounts either so just changed the password, and only forward the NVR port but not the camera ports.

[akelley 0]

Thanks for the responses and it's a good point about not exposing the camera port, but not every situation uses an NVR. And considering this is a sub $200 camera, it will likely find its way into many consumer hands who may not be able to weigh the exposed port vs. pass through NVR options (or want to pay for the NVR). Also, in my testing I have not been able to get my "goto" Android AP (IP Cam Viewer Pro) to access the camera through standard http port - only rtsp.

[buellwinkle 0]

Yes, it uses the rtsp port as may camera brands do.

[empiresecuritycamera 0]

IP Cam Viewer (regular/pro) works great with all Dahua products. You can't use http port with Dahua because it does't have one. RTSP and TCP work great.

 

Also, it will not work on Google TV. You may want to avoid the IP Cam Viewer Pro version due to this limitation.

[akelley 0]

IP Cam Viewer (regular/pro) works great with all Dahua products. You can't use http port with Dahua because it does't have one. RTSP and TCP work great.

 

Also, it will not work on Google TV. You may want to avoid the IP Cam Viewer Pro version due to this limitation.

 

Not sure what you mean by it doesn't have http port because it certainly does as you can access the camera with a web browser, and you can change the port from the standard 80. I have no problem doing this and was able to access the camera remotely (outside of my network) by forwarding the camera's http port in my router. But it appears the video stream does not work over http for this camera, or it uses a non standard method all together.

 

By the way, I was looking on your site (Empire Security) and couldn't find where I could download updated firmware. I also couldn't find this on the Dahua website either. Any idea where I can get updated firmware?

[empiresecuritycamera 0]

You are absolutely correct. What I meant to say was there was no streaming http port like on some type of "webcam" or other brands have. There is no "http://192.168.1.108/liveimage.jpg" There is, however, a built in webserver like many people on the forum have documented. You will be able to log into this remotely from Internet Explorer if you have the correct port forwarded through the router. Sorry for the confusion!

 

Dahua deliberately limits access to updated firmware. I do not think they will ever have a firmware download link on their website. They require you to get the firmware from the vendor directly. While I don't agree with the policy 100%, I certainly understand where they are coming from. We have had a handful of people completely "brick" their IPC because they tried to load the wrong firmware or unplugged the camera halfway through the upgrade process. Most of the time the damage is so bad we can no longer even telnet into the Linux OS. Then you have to wait for your camera to make the round trip back to Dahua HQ to fix. All of our registered vendors and installers have direct access to our firmware. If you are an end user or home user, usually we will ask you to forward the port through your router and we will have a technician load the firmware on remotely. We try to protect most end users from themselves. I think George Carlin said it best....

 

 

 

 

 

IP Cam Viewer (regular/pro) works great with all Dahua products. You can't use http port with Dahua because it does't have one. RTSP and TCP work great.

 

Also, it will not work on Google TV. You may want to avoid the IP Cam Viewer Pro version due to this limitation.

 

Not sure what you mean by it doesn't have http port because it certainly does as you can access the camera with a web browser, and you can change the port from the standard 80. I have no problem doing this and was able to access the camera remotely (outside of my network) by forwarding the camera's http port in my router. But it appears the video stream does not work over http for this camera, or it uses a non standard method all together.

 

By the way, I was looking on your site (Empire Security) and couldn't find where I could download updated firmware. I also couldn't find this on the Dahua website either. Any idea where I can get updated firmware?