Camera Ezviz C6C (CS-CV246, A0-3B1WFR) teardown

Thanks for showing the inside. The camera is very cheap, only PLN 160. Does it send any data to an external cloud? Can you just connect to Hikvision cameras?

Manufacturer's website (in Polish): https://www.ezviz.com/pl/product/c6c-ez360/1254

Quote:

Does it send any data to an external cloud?

EZVIZ cloud proprietary protocol

Added after 6 [minutes]:

EZViZ is a brand of Hikvision, and Hikvision:
"US government bans Huawei, ZTE and Hikvision tech over 'unacceptable' spying fears."

Hi

In addition, in recent camera firmware updates, EZVIZ began to mess with the RTSP stream, turning off the stream by default, thus "encouraging" users to use the cloud or memory cards to record events. In the thematic app, you can easily turn on RTSP using the original app, although the option is hidden, but for example, in the DP2C door viewfinder, there is no such option, also through EZVIZ Studio ... So if someone uses cameras of this brand and RTSP stream, then let go of the firmware updates.

The advantage of cameras is that they are cheap. The downside is that after about a year, the two cameras do not keep the settings and after the power is cut off, they need to be reconfigured. I did not make a major diagnosis, but the 3.3V battery visible in the pictures had the correct voltage during the demolition. FW updates automatically, so I had to re-enable RTSP. The problem is that this option can only be enabled in the local network to which the camera is connected (it is in the local camera settings). When offline, there are no options in the app. Another minus is that I have not seen that the Ezviza intercom has neither rtsp nor the possibility of downloading the stream otherwise than through the application - there is even no possibility of connecting it to the NVR. An alternative soft for these devices would be very useful, or some kind of patent for controlling them through port 8000 and downloading the stream through this port, which would enable the creation of an independent application operating without the cloud.

Added after 1 [minutes]:

So far I haven't had time to sit down to it, but I think you can start testing from this: https://www.docdroid.net/wlD2i8v/hikvision-isapi-26-ipmd-service-pdf#page=22

Maybe a little off the topic of changing the firmware, but since the camera works on the HikVision protocol, it will work with almost any NVR (including basic PTZ functions), and this can usually be forced to work not via the cloud, but via TCP with a dedicated smart app or computer and we have independence from the PRC and their servers.
However, there is another dependence on something - for the NVR we must have a fixed external IP or use DynDNS services. Well, but you also need to have the net and be dependent on its provider.
This operation is a bit lame, but the less so, the more branded the NVR is.
Anyway, you can do the same with the webcam itself if it has a web server. Does the camera have this option?

I have a whole box of IP cameras, I'm counting on projects in the style
https://github.com/OpenIPC/firmware

because all these cloud freaks are the same problems, not to mention security.

kotbury wrote:

Anyway, you can do the same with the webcam itself if it has a web server. Does the camera have this option?

I do not know about this model, but I once had the misfortune of configuring another camera-like product from the land of rice, no www, no possibility to connect the application via LAN, preview only via the cloud ...

chemik_16 wrote:

I have a whole carton of IP cameras, I'm counting on projects in the style

It would be nice if this developed, because even apart from security issues, you can often get a headache on the factory camera and recorder software when it works as it pleases.

Hello i have two ezviz camera ,they are not unbind from account. works only in lan mode . Can i use in other mode ?

I recently bought a similar XIAOMI Mi Home Security Camera 360 PTZ 2K Pro. How to take strim from it because I want to use it in Home Assistant.

You can't, you need to look for alternative software. Or ride through the clouds.

Can a friend recommend such an app?

kotbury wrote:

since the camera works on the HikVision protocol, it will work with almost any NVR (including basic PTZ functions), and this can usually be forced to work not via the cloud, but via TCP with a dedicated app for a smart or computer, and we are independent of the PRC and their servers .

Adult registrars have a dedicated app, but personalized for a specific company; for example, in the case of BCS, Dahuy, these are different types of DMSS, HikVision devices have the BitVision app, personally I have all the equipment (both cameras and recorder) based on Xionmaitech chipsets, i.e. XAI - it comes with this (and cameras, and NVR) ISS Mobile 1.5 app .7 (which is not in GooglePlay). So that's a lot of searching and matching with no guarantee it will work. And the basis - the equipment must be able to connect and configure via www. And whether the title camera has such a possibility at all - to be checked.
Monitoring experts may write more (I'm rather an amateur myself).

chemik_16 wrote:

You can't, you need to look for alternative software. Or ride through the clouds.

Can you tell me more about alternative software?

It's a pity that in these cameras Ezviz does not go to set presets.

Maybe someone will make a list of cheap outdoor IP cameras and PTZ, which can be technically configured inside the local network without external clouds and unreliable applications?
This would greatly help in the selection of equipment for budget installations that emphasize discretion and simplicity when servicing in closed networks.

How is access to a stream blocked?
If strim goes through the cloud how does it work?

Daroken wrote:

How is access to a stream blocked?
If strim goes through the cloud, how does it work?

When it comes to the smart IP cameras themselves, there is no blockage here. Normally, the camera's API architecture is client-based and connects to the domain name through which access to stream, settings, etc. is made.
As for closed networks, they are simply listening to the DHCP server that reserves ipv4 for MAC addresses and there is no configured gateway to the network above.

How can you take over strim to the cloud to view the image directly in the local network?

This is a river topic dedicated to those who sit at CTFs. When I get such a camera, I will use wireshark to examine the packets and maybe I can somehow cheat certificates or find some very lame implementation of the protocol.

Of interest - I ordered some fresh IP cameras from china, new models. They are worth your interest, they are based on new Ingenic processors with AI module.
One with two lenses - one fixed one PTZ, based on ingenic T31. Plus wifi + LAN. Cost approx. 110zł - a whole bunch of clones on ali.
The other with one, rectangular bullet type - T21, only for cable. About 60-70zł.

And why is it worthy of interest ? These are already quite powerful CPUs for such cheap cameras
http://www.ingenic.com.cn/en/?product/id/20.html

They expose Onvif by default,
they have SDK available, so there are alternative FW OpenIPC for them.
They have 4M-5Mpx sensors, medium quality, but it's 2K/4K at the price of recent 720/1080p - which were also usually useless due to very weak cpu and small amount of ram.

Tomorrow or the day after tomorrow I will find a moment, I can insert teardown.

It would be great if you could find a moment and show off, in the form of a short review, how they work and how they behave.