ZeroDay Findings
Sign inSign up

Findings

CVE-2017-7921

Hikvision Multiple Products Improper Authentication Vulnerability

Published May 5, 2017 · updated Jun 16, 2026 · Hikvision Multiple Products

An Improper Authentication issue was discovered in Hikvision DS-2CD2xx2F-I Series V5.2.0 build 140721 to V5.4.0 build 160530, DS-2CD2xx0F-I Series V5.2.0 build 140721 to V5.4.0 Build 160401, DS-2CD2xx2FWD Series V5.3.1 build 150410 to V5.4.4 Build 161125, DS-2CD4x2xFWD Series V5.2.0 build 140721 to V5.4.0 Build 160414, DS-2CD4xx5 Series V5.2.0 build 140721 to V5.4.0 Build 160421, DS-2DFx Series V5.2.0 build 140805 to V5.4.5 Build 160928, and DS-2CD63xx Series V5.0.9 build 140305 to V5.3.5 Build 160106 devices. The improper authentication vulnerability occurs when an application does not adequately or correctly authenticate users. This may allow a malicious user to escalate his or her privileges on the system and gain access to sensitive information.

Timeline

Detection, updates, and resolution for this record.

  1. May 5, 2017 · Catalog

    Detected

    An Improper Authentication issue was discovered in Hikvision DS-2CD2xx2F-I Series V5.2.0 build 140721 to V5.4.0 build 160530, DS-2CD2xx0F-I Series V5.2.0 build 140721 to V5.4.0 Build 160401, DS-2CD2xx2FWD Series V5.3.1 build 150410 to V5.4.4 Build 161125, DS-2CD4x2xFWD Series V5.2.0 build 140721 to V5.4.0 Build 160414, DS-2CD4xx5 Series V5.2.0 build 140721 to V5.4.0 Build 160421, DS-2DFx Series V5

  2. Mar 5, 2026 · CISA KEV

    Known exploited

    Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.

  3. Mar 26, 2026 · CISA KEV

    Remediation due

    Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.

  4. Jun 16, 2026 · Catalog

    Updated

    An Improper Authentication issue was discovered in Hikvision DS-2CD2xx2F-I Series V5.2.0 build 140721 to V5.4.0 build 160530, DS-2CD2xx0F-I Series V5.2.0 build 140721 to V5.4.0 Build 160401, DS-2CD2xx2FWD Series V5.3.1 build 150410 to V5.4.4 Build 161125, DS-2CD4x2xFWD Series V5.2.0 build 140721 to V5.4.0 Build 160414, DS-2CD4xx5 Series V5.2.0 build 140721 to V5.4.0 Build 160421, DS-2DFx Series V5

Required action

Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.

CISA due date Mar 26, 2026

Affected

  • cpe hikvision/ds-2cd2032-i firmwareversion unspecified
  • cpe hikvision/ds-2cd2112-i firmwareversion unspecified
  • cpe hikvision/ds-2cd2132-i firmwareversion unspecified
  • cpe hikvision/ds-2cd2212-i5 firmwareversion unspecified
  • cpe hikvision/ds-2cd2232-i5 firmwareversion unspecified
  • cpe hikvision/ds-2cd2312-i firmwareversion unspecified
  • cpe hikvision/ds-2cd2332-i firmwareversion unspecified
  • cpe hikvision/ds-2cd2412f-i(w) firmwareversion unspecified
  • cpe hikvision/ds-2cd63xx series firmwareversion unspecified
  • cpe hikvision/ds-2dfx series firmwareversion unspecified
  • vendor Hikvision Multiple Productsversion unspecified

Sources

  • CISA KEVCVE-2017-7921

    Multiple Hikvision products contain an improper authentication vulnerability that could allow a malicious user to escalate privileges on the system and gain access to sensitive information.

    cisa.gov
  • CVE.orgCVE-2017-7921

    Official CVE identifier

    cve.org
  • FIRST EPSSCVE-2017-7921

    30-day exploitation probability 100.0%

    first.org
  • Metasploit Modulesauxiliary_admin/http/hikvision_unauth_pwd_reset_cve_2017_7921

    Public module reference (normal). Module source is not copied into this catalog.

    rapid7.com
  • Metasploit Modulesauxiliary_gather/hikvision_info_disclosure_cve_2017_7921

    Public module reference (normal). Module source is not copied into this catalog.

    rapid7.com
  • NIST NVDCVE-2017-7921

    An Improper Authentication issue was discovered in Hikvision DS-2CD2xx2F-I Series V5.2.0 build 140721 to V5.4.0 build 160530, DS-2CD2xx0F-I Series V5.2.0 build 140721 to V5.4.0 Build 160401, DS-2CD2xx2FWD Series V5.3.1 build 150410 to V5.4.4 Build 161125, DS-2CD4x2xFWD Series V5.

    nvd.nist.gov

References