CVE-2017-7921 - Hikvision Multiple Products

Overview

A source-backed snapshot of this vulnerability.

An Improper Authentication issue was discovered in Hikvision DS-2CD2xx2F-I Series V5.2.0 build 140721 to V5.4.0 build 160530, DS-2CD2xx0F-I Series V5.2.0 build 140721 to V5.4.0 Build 160401, DS-2CD2xx2FWD Series V5.3.1 build 150410 to V5.4.4 Build 161125, DS-2CD4x2xFWD Series V5.2.0 build 140721 to V5.4.0 Build 160414, DS-2CD4xx5 Series V5.2.0 build 140721 to V5.4.0 Build 160421, DS-2DFx Series V5.2.0 build 140805 to V5.4.5 Build 160928, and DS-2CD63xx Series V5.0.9 build 140305 to V5.3.5 Build 160106 devices. The improper authentication vulnerability occurs when an application does not adequately or correctly authenticate users. This may allow a malicious user to escalate his or her privileges on the system and gain access to sensitive information.

CISA KEVyesWhether CISA lists this as exploited.

Techniques0AI attack methods connected to this vulnerability.

Case studies0Examples where this vulnerability is mentioned.

Vulnerability status

How serious this vulnerability is and whether it is known to be exploited.

CISA KEVCRITICAL

CVE ID: CVE-2017-7921
Vendor/project: Hikvision
Product: Multiple Products
Vulnerability name: Hikvision Multiple Products Improper Authentication Vulnerability
Date added: 2026-03-05
Due date: 2026-03-26
Known ransomware campaign use: Unknown
CVSS v3: 9.8

CWE-287

Exploit context

What the vulnerability is about.

An Improper Authentication issue was discovered in Hikvision DS-2CD2xx2F-I Series V5.2.0 build 140721 to V5.4.0 build 160530, DS-2CD2xx0F-I Series V5.2.0 build 140721 to V5.4.0 Build 160401, DS-2CD2xx2FWD Series V5.3.1 build 150410 to V5.4.4 Build 161125, DS-2CD4x2xFWD Series V5.2.0 build 140721 to V5.4.0 Build 160414, DS-2CD4xx5 Series V5.2.0 build 140721 to V5.4.0 Build 160421, DS-2DFx Series V5.2.0 build 140805 to V5.4.5 Build 160928, and DS-2CD63xx Series V5.0.9 build 140305 to V5.3.5 Build 160106 devices. The improper authentication vulnerability occurs when an application does not adequately or correctly authenticate users. This may allow a malicious user to escalate his or her privileges on the system and gain access to sensitive information.

Related AI techniques

AI attack methods connected to this vulnerability.

View all related techniques →

No related AI attack methods. No AI attack method is connected to this vulnerability in the current data.

Related case studies

Examples where this vulnerability is mentioned.

View all case studies →

No related case studies. No case study currently mentions this vulnerability.

Source evidence

Original public records and references for this page.

View all sources →

Original source

Original source links

Open the public records and source datasets used for this page.

NVD CVE pagehttps://nvd.nist.gov/vuln/detail/CVE-2017-7921 CVE API docshttps://nvd.nist.gov/developers/vulnerabilities Data feedshttps://nvd.nist.gov/vuln/data-feeds Cataloghttps://www.cisa.gov/known-exploited-vulnerabilities-catalog Data repositoryhttps://github.com/cisagov/kev-data af854a3a-2127-422b-91ae-364da2661108http://www.hikvision.com/us/about_10805.html af854a3a-2127-422b-91ae-364da2661108http://www.securityfocus.com/bid/98313 af854a3a-2127-422b-91ae-364da2661108https://ghostbin.com/paste/q2vq2 af854a3a-2127-422b-91ae-364da2661108https://ics-cert.us-cert.gov/advisories/ICSA-17-124-01 af854a3a-2127-422b-91ae-364da2661108https://www.hikvision.com/cn/support/CybersecurityCenter/SecurityNotices/20170314/af854a3a-2127-422b-91ae-364da2661108https://www.hikvision.com/en/support/cybersecurity/security-advisory/security-notification--privilege-escalating-vulnerability-in-cer/af854a3a-2127-422b-91ae-364da2661108https://www.hikvision.com/us-en/support/document-center/special-notices/privilege-escalating-vulnerability-in-certain-hikvision-ip-cameras/134c704f-9b21-4f2e-91b3-4a467353bcc0https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2017-7921