Subscriber Discussion

Hikvision Will Be Locked After 6 Failed Login Attempts

UI
Undisclosed Integrator #1
Dec 06, 2016

It seems that after all the news about HIKVISION hacks and botnet attacks, said company has strengthened it's security measures on the standalone DVR level at least. It is using connection screens to remind the user of always using STRONG PASSWORDS.

But I don't get what does it's new "will be LOCKED after 6 failed login attempts" warning message really means.

- Is it "Lock the IP address out" ? (the IP from which the user is remotely connecting from at that moment)

- Or "Lock the DVR itself" ? (so that neither the owner of said DVR can login even with his own correct password, and therefore requiring sending an e-mail and reset using a date specific password)

- Or "Lock temporarily the DVR until X amount of time" ? (and then later, anyone with the correct password can login again). And X amount of time being ??

(1)
Avatar
Ethan Ace
Dec 06, 2016

Hikvision locks the specific user account which you were trying to log in with. Web or local, it doesn't matter, it's locked in both places. You can still log in with other accounts, if there are any.

The lock is cleared after 30 minutes or when the device is rebooted, whichever comes first.

This is how I recall Hikvision working off the top of my head. Others with the feature all work differently.

(1)
(2)
CW
Craig Wilson
Dec 06, 2016

Ethan, that's how it works... your NVR is also more than capable of locking the cameras all up... so for example on exacq vision, dont screw up the password when you add the cameras because it will lock up the whole mess of them... next thing you know you're rebooting cameras from the patch panel...

(1)
(1)
Avatar
Ethan Ace
Dec 06, 2016

Craig, I've seen that as well. We went through an especially fun period where we were changing passwords on our test gear from default to a standardized password, and we'd plug one in and try to add it to a VMS and end up locking it out half the time.

(2)
FL
Fraser Larcombe
Dec 28, 2016
Vix Verify - Imagus

Easy, give them a call at Hik and get them to use their back doors to get into the product and reset it for you ;-)

(1)
(1)
New discussion

Ask questions and get answers to your physical security questions from IPVM team members and fellow subscribers.

Newest discussions