The single most significant vulnerability in the H.264 DVR landscape is the "Default Credential" problem.
H.264 DVRs operate on a bifurcated authentication model: h.264 dvr login password
For most H.264 DVR systems, which often use generic firmware, the most common default login credentials are for the username and 123456 for the password. Common Default Credentials Try these combinations if you are using factory settings: Username: admin Passwords: 123456 (Most common for generic H.264 models) 000000 or 111111 Blank (No password) admin 12345 Brand-Specific Defaults H.264 Default Password - Google Groups The single most significant vulnerability in the H
If software methods fail, you may need to open the device. Many motherboards feature a "Reset" button or two solder pads labeled "TP" or "JP" that can be shorted with a screwdriver while the device powers on to restore factory settings. CMOS Battery Removal: Many motherboards feature a "Reset" button or two
Some systems use a graphical pattern instead of a text password. A common default is a backwards "C" (starting from the top left, dragging to the top right, down the right side, and then across to the bottom left).