CVE-2017-7921
Hikvision · exploited in the wild
- Published
- 6 May 2017
- Last modified
- 17 June 2026
- CVSS
- 9.8 v3.1
- Severity
- critical
- EPSS
- >99.9% (100th pct)
- CISA KEV
- Added 5 March 2026 KEV
- NVD status
- Analyzed
- Weaknesses
- CWE-287
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Description
An Improper Authentication issue was discovered in Hikvision DS-2CD2xx2F-I Series V5.2.0 build 140721 to V5.4.0 build 160530, DS-2CD2xx0F-I Series V5.2.0 build 140721 to V5.4.0 Build 160401, DS-2CD2xx2FWD Series V5.3.1 build 150410 to V5.4.4 Build 161125, DS-2CD4x2xFWD Series V5.2.0 build 140721 to V5.4.0 Build 160414, DS-2CD4xx5 Series V5.2.0 build 140721 to V5.4.0 Build 160421, DS-2DFx Series V5.2.0 build 140805 to V5.4.5 Build 160928, and DS-2CD63xx Series V5.0.9 build 140305 to V5.3.5 Build 160106 devices. The improper authentication vulnerability occurs when an application does not adequately or correctly authenticate users. This may allow a malicious user to escalate his or her privileges on the system and gain access to sensitive information.
Exploitation
Added to the CISA Known Exploited Vulnerabilities catalogue on 5 March 2026, with a remediation due date of 26 March 2026 for US federal civilian agencies. CISA records no known ransomware campaign use.
Required action as published by CISA: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.
Affected products
| Product | Vendor | Type | Versions named |
|---|---|---|---|
| DS-2CD2032-I | Hikvision | unknown | — |
| DS-2CD2112-I | Hikvision | unknown | — |
| DS-2CD2132-I | Hikvision | unknown | — |
| DS-2CD2212-I5 | Hikvision | unknown | — |
| DS-2CD2232-I5 | Hikvision | unknown | — |
| DS-2CD2312-I | Hikvision | unknown | — |
| DS-2CD2332-I | Hikvision | unknown | — |
| DS-2CD2412F-I(W) | Hikvision | unknown | — |
| DS-2CD2432F-I(W) | Hikvision | unknown | — |
| DS-2CD2512F-I(S) | Hikvision | unknown | — |
| DS-2CD2532F-I(S) | Hikvision | unknown | — |
| DS-2CD2612F-I(S) | Hikvision | unknown | — |
| DS-2CD2632F-I(S) | Hikvision | unknown | — |
| DS-2CD2712F-I(S) | Hikvision | unknown | — |
| DS-2CD2732F-I(S) | Hikvision | unknown | — |
| DS-2CD2T32-I3 | Hikvision | unknown | — |
| DS-2CD2T32-I5 | Hikvision | unknown | — |
| DS-2CD2T32-I8 | Hikvision | unknown | — |
| DS-2CD4012F-(A) | Hikvision | unknown | — |
| DS-2CD4012F-(P) | Hikvision | unknown | — |
| DS-2CD4012F-(W) | Hikvision | unknown | — |
| DS-2CD4012FWD-(A) | Hikvision | unknown | — |
| DS-2CD4012FWD-(P) | Hikvision | unknown | — |
| DS-2CD4012FWD-(W) | Hikvision | unknown | — |
| DS-2CD4024F-(A) | Hikvision | unknown | — |
| DS-2CD4024F-(P) | Hikvision | unknown | — |
| DS-2CD4024F-(W) | Hikvision | unknown | — |
| DS-2CD4032FWD-(A) | Hikvision | unknown | — |
| DS-2CD4032FWD-(P) | Hikvision | unknown | — |
| DS-2CD4032FWD-(W) | Hikvision | unknown | — |
| DS-2CD4112F-I(Z) | Hikvision | unknown | — |
| DS-2CD4112FWD-I(Z) | Hikvision | unknown | — |
| DS-2CD4124F-I(Z) | Hikvision | unknown | — |
| DS-2CD4132FWD-I(Z) | Hikvision | unknown | — |
| DS-2CD4212F-I(H) | Hikvision | unknown | — |
| DS-2CD4212F-I(S) | Hikvision | unknown | — |
| DS-2CD4212F-I(Z) | Hikvision | unknown | — |
| DS-2CD4212FWD-I(H) | Hikvision | unknown | — |
| DS-2CD4212FWD-I(S) | Hikvision | unknown | — |
| DS-2CD4212FWD-I(Z) | Hikvision | unknown | — |
| DS-2CD4224F-I(H) | Hikvision | unknown | — |
| DS-2CD4224F-I(S) | Hikvision | unknown | — |
| DS-2CD4224F-I(Z) | Hikvision | unknown | — |
| DS-2CD4232FWD-I(H) | Hikvision | unknown | — |
| DS-2CD4232FWD-I(S) | Hikvision | unknown | — |
| DS-2CD4232FWD-I(Z) | Hikvision | unknown | — |
| DS-2CD4312F-I(H) | Hikvision | unknown | — |
| DS-2CD4312F-I(S) | Hikvision | unknown | — |
| DS-2CD4312F-I(Z) | Hikvision | unknown | — |
| DS-2CD4324F-I(H) | Hikvision | unknown | — |
| DS-2CD4324F-I(S) | Hikvision | unknown | — |
| DS-2CD4324F-I(Z) | Hikvision | unknown | — |
| DS-2CD4332FWD-I(H) | Hikvision | unknown | — |
| DS-2CD4332FWD-I(S) | Hikvision | unknown | — |
| DS-2CD4332FWD-I(Z) | Hikvision | unknown | — |
| DS-2CD63XX SERIES | Hikvision | unknown | — |
| DS-2CD6412FWD | Hikvision | unknown | — |
| DS-2DFX SERIES | Hikvision | unknown | — |
References
Vendor advisory and patch
- http://www.securityfocus.com/bid/98313 third-party
- https://ghostbin.com/paste/q2vq2
- https://ics-cert.us-cert.gov/advisories/ICSA-17-124-01 third-party
- http://www.securityfocus.com/bid/98313 third-party
- https://ghostbin.com/paste/q2vq2
- https://ics-cert.us-cert.gov/advisories/ICSA-17-124-01 third-party
- https://www.hikvision.com/cn/support/CybersecurityCenter/SecurityNotices/20170314/ third-party
- https://www.hikvision.com/en/support/cybersecurity/security-advisory/security-notification--privilege-escalating-vulnerability-in-cer/ third-party
- https://www.hikvision.com/us-en/support/document-center/special-notices/privilege-escalating-vulnerability-in-certain-hikvision-ip-cameras/ third-party
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2017-7921 government
Record assembled from NVD, CISA KEV 2026.09.04 and FIRST EPSS 2026-09-04. Affected products are those NVD's CPE configuration names that fall inside this site's scope; a CVE may affect products outside it.