Ports on Security Camera, NVR & DVR?
When
you receive your DVR you might be wondering what some of the ports are for.
This article will explain some of them, the reason they are their as well as a
little bit of history.
USB =
Universal Serial Bus
Universal Serial Bus is an industry standard developed in the mid-1990s to replace the slower serial and ps2 communication ports on a computer. The purpose was to be able to attach devices like a mouse, a keyboard, disk drives, network adapters, portable media players, and other devices that help qualify the word Universal in the name of the port. It has become such a standard that it has evolved over the years as USB 1.x, USB 2.0, USB 3.0, USB 3.1, and USB Type-C. The DVRs and NVRs continue with this trend by offering USB ports for connecting a mouse and flash drives or hard drives to the unit by using one of the available ports. Unfortunately, USB keyboards are not supported by the operating system and only the online keyboard is available for entering data. DVRs and NVRs are very similar to computers, so the device needs to be supported in the operating system. This matters especially when connecting drives in the sense that you could try to use a USB drive that is too new for the unit. A DVR or NVR manufactured during a certain era will only support flash drives and hard drives with sizes appropriate to that era. For example, you will not find a 64GB flash drive or a 6 Terabyte hard drive in 2007. There is no harm plugging in a USB drive to see if it is recognized since the port is plug and play.
Ethernet
Port
An 8P8C (8 position 8 contact) modular connector, often called RJ45 (Registered Jack 45), has become an extremely important plug since the world wide web is connected with this standard Ethernet port on all kinds of devices. Our DVRs have one Ethernet port so that they can connect to a router for access to the unit from the world wide web. Our NVRs have the same port, and may also have power over Ethernet ports (POE) for cameras to connect to it for power and video data transmission. You can buy an 8 channel NVR, for example, that has a built-in 8 port POE switch that allows you to plug 8 IP network cameras into the back of the unit. You can also buy an 8 channel NVR that does not have any built in POE ports, so the video data would need to be networked back to the NVR. This can congest a network if you have other computers and devices using the same routers and switches, but there are ways to design your network topology to reduce or separate traffic.
BNC
Connector
The BNC connector derived its name from Bayonet Neill–Concelman, which is a combination of its bayonet mount locking mechanism and its inventors, Paul Neill and Carl Concelman. The BNC connector is a quick connect radio frequency connector commonly made in 50 and 75 ohm versions used for coaxial cable.
This connector has become the heart and soul of the analog and HD-CVI DVR because of a quick plug and play connection option. Many people like to use existing coax cable and continue to use it with new technologies like HD-CVI rather than mess with a complete overhaul to an IP technology system. While IP may be the future, this connector has found new legs with new technologies and should remain viable for years to come. As long as coax cable still exists, the BNC connector will remain the default option.
RCA
Connector
An RCA connector is designed to carry audio and video signals, and received its name from the Radio Corporation of America in the early 40s when it was designed to be an internal connector in home radio-phonograph consoles. This port has evolved over the years to encompass video in the famous red, white, and yellow composite video. Our DVRs and NVRs use the connector for audio-in and audio-out primarily since video on our DVRs is covered by the BNC port and NVRs use networking to transmit video.
HDMI Port
HDMI
stands for High-Definition Multimedia Interface, and it is a proprietary
interface designed for sending video and audio to and from HDMI compliant
devices. The video is uncompressed and the audio can be compressed or uncompressed.
Our DVRs and NVRs have this port as a connection option to a TV or monitor for
viewing the live video or playback, as well as adjusting the settings of the
unit through the menu options. The main improvement of this port over
VGA, for example, is the ability to do high definition without video loss,
which allows us to see higher quality video. This means that we can see
more cameras on the screen at one time clearly and see more detail.
In Summary
There were many ports used in the past that are now likely on the way out. Most notably is the RS485 connector that is used to control the PTZ cameras. With Ethernet IP camera and HD-CVI camera technologies taking off, connecting a PTZ is now done over the one cable with no additional cables needed for PTZ control. They should still be present on hybrids and tribrids, but anyone buying a new system should opt for one of the new technologies since video surveillance is about protecting assets. VGA should hang around a little longer, but HDMIs ability to handle high definition video without video loss and audio on the same cable, make it very convenient. RS232 / Serial, PS2, LPT, are all in the port graveyard, but there are likely still some machines out there that have them.
No
doubt that new standard ports will come, as they are always being invented or
improved. The research and development teams at all technology companies
are working towards the next big thing, so that they can create a new standard
port for years to come. DVR and NVR companies will incorporate any new
port into their system that is useful as it grows in popularity. For
example, if a port replaces USB 3.0 for connecting external hard drives, that
would become a standard very quickly.
Some software based port are required to come
online of IP camera, DVR or NVR. One for the HTTP port (port 80) and one
for the TCP port (port 37777). You will find that
the majority of network devices which are accessible using an Internet browser
will be set as standard to port 80, including IP cameras and
routers etc. This is due to the standard port for HTTP, or information being
displayed through an browser, being port 80.
HTTPS (Hypertext Transfer Protocol Secure) is a secured HTTP
version where all traffic is bind with strong encryption that passes through
Port 443. This port is also connected with TCP protocol and creates a secure
connection between the webpages and browser.
Port 554 RTSP for communication between the Content Server and the Wowza Media Server. Needs to be open between the Content Server and the Wowza Media Server.
A web server would typically have this open and listening if
there are any types of these activities. If the machine is windows you
can run "netstat -a -b -v -n", to display the processes
associated with a particular open port.
A backdoor was found in Chinese-produced DVRs and NVRs that secretly allowed access to the recorders. While it was first attributed to Huawei (HiSilicon), Huawei subsequently refuted their involvement.
How the
Backdoor Works
The backdoor uses port
knocking via the management port of vulnerable equipment. A series of
commands are sent to the device via the management port, TCP 9530, which in
turn opens telnet. When telnet is enabled the attacker can use one of six
hardcoded root credentials to gain full control of the vulnerable device.
The skill level needed to
exploit this is low and similar to the skill level needed to exploit
the Dahua Wiretapping Vulnerability from last year, requiring a
limited working knowledge of python. A proof of concept is available,
which is used to:
- Send a command to open
Telnet on the target device (OpenTelnet: OpenOnce)
- Use a pre-shared key
for access (2wj9fsa2)
- Receive an 8 character
number / respond with that number + PSK
- Open a Telnet session
with the device
- Login with 1 of 6
hardcoded root accounts
Major Chinese
Manufacturer Impact Unlikely
Major China manufacturers like Dahua, Hikvision, Uniview are not impacted, from everything we have seen. We executed the proof of concept code from the disclosure on multiple devices and were unable to gain access using the backdoor.
The backdoor primarily impacts devices using HiSilicon SOC with Xiongmai software, which is dozens of small OEM manufacturers, using minimally modified OEM firmware, Open Source OS and drivers, and enabling telnet on port 9530.
https://ipvm.com/reports/hik-backdoor
https://ipvm.com/reports/hik-exploit
https://ipvm.com/reports/dahua-backdoor
https://thehackernews.com/2022/07/dahua-ip-camera-vulnerability-could-let.html
https://www.malwarebytes.com/blog/news/2021/09/patch-now-insecure-hikvision-security-cameras-can-be-taken-over-remotely
https://www.securityweek.com/many-hikvision-cameras-exposed-attacks-due-critical-vulnerability/
https://www.securityweek.com/backdoor-found-dahua-video-recorders-cameras/
