Every CVE Search/ Get API key

CVE-2017-7921

An Improper Authentication issue was discovered in Hikvision DS-2CD2xx2F-I Series V5.2.0 build...

9.8 CriticalIn KEVPublic exploit

An Improper Authentication issue was discovered in Hikvision DS-2CD2xx2F-I Series V5.2.0 build 140721 to V5.4.0 build 160530, DS-2CD2xx0F-I Series V5.2.0 build 140721 to V5.4.0 Build 160401, DS-2CD2xx2FWD Series V5.3.1 build 150410 to V5.4.4 Build 161125, DS-2CD4x2xFWD Series V5.2.0 build 140721 to V5.4.0 Build 160414, DS-2CD4xx5 Series V5.2.0 build 140721 to V5.4.0 Build 160421, DS-2DFx Series V5.2.0 build 140805 to V5.4.5 Build 160928, and DS-2CD63xx Series V5.0.9 build 140305 to V5.3.5 Build 160106 devices. The improper authentication vulnerability occurs when an application does not adequately or correctly authenticate users. This may allow a malicious user to escalate his or her privileges on the system and gain access to sensitive information.

Attack profile

How easy it is to exploit

Attack vector
Network
Complexity
Low
Privileges needed
None
User interaction
None

What an attacker can affect

Confidentiality
High
Integrity
High
Availability
High

Exploit likelihood

100.0%Up 95.5 points since Apr 14, 2021
90%50%10%1%

What each source reports

NVD Score used 9.8

An Improper Authentication issue was discovered in Hikvision DS-2CD2xx2F-I Series V5.2.0 build 140721 to V5.4.0 build 160530, DS-2CD2xx0F-I Series V5.2.0 build 140721 to V5.4.0 Build 160401, DS-2CD2xx2FWD Series V5.3.1 build 150410 to V5.4.4 Build 161125, DS-2CD4x2xFWD Series V5.2.0 build 140721 to V5.4.0 Build 160414, DS-2CD4xx5 Series V5.2.0 build 140721 to V5.4.0 Build 160421, DS-2DFx Series V5.2.0 build 140805 to V5.4.5 Build 160928, and DS-2CD63xx Series V5.0.9 build 140305 to V5.3.5 Build 160106 devices. The improper authentication vulnerability occurs when an application does not adequately or correctly authenticate users. This may allow a malicious user to escalate his or her privileges on the system and gain access to sensitive information.

Record
CVE-2017-7921
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS 2.0
7.5 HighAV:N/AC:L/Au:N/C:P/I:P/A:P
Weakness
CWE-287
Updated
2026-11-02
CVE List 9.8

An Improper Authentication issue was discovered in Hikvision DS-2CD2xx2F-I Series V5.2.0 build 140721 to V5.4.0 build 160530, DS-2CD2xx0F-I Series V5.2.0 build 140721 to V5.4.0 Build 160401, DS-2CD2xx2FWD Series V5.3.1 build 150410 to V5.4.4 Build 161125, DS-2CD4x2xFWD Series V5.2.0 build 140721 to V5.4.0 Build 160414, DS-2CD4xx5 Series V5.2.0 build 140721 to V5.4.0 Build 160421, DS-2DFx Series V5.2.0 build 140805 to V5.4.5 Build 160928, and DS-2CD63xx Series V5.0.9 build 140305 to V5.3.5 Build 160106 devices. The improper authentication vulnerability occurs when an application does not adequately or correctly authenticate users. This may allow a malicious user to escalate his or her privileges on the system and gain access to sensitive information.

Record
CVE-2017-7921
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Weakness
CWE-287
Updated
2026-11-02
EUVDEUVD-2017-16892 9.8

An Improper Authentication issue was discovered in Hikvision DS-2CD2xx2F-I Series V5.2.0 build 140721 to V5.4.0 build 160530, DS-2CD2xx0F-I Series V5.2.0 build 140721 to V5.4.0 Build 160401, DS-2CD2xx2FWD Series V5.3.1 build 150410 to V5.4.4 Build 161125, DS-2CD4x2xFWD Series V5.2.0 build 140721 to V5.4.0 Build 160414, DS-2CD4xx5 Series V5.2.0 build 140721 to V5.4.0 Build 160421, DS-2DFx Series V5.2.0 build 140805 to V5.4.5 Build 160928, and DS-2CD63xx Series V5.0.9 build 140305 to V5.3.5 Build 160106 devices. The improper authentication vulnerability occurs when an application does not adequately or correctly authenticate users. This may allow a malicious user to escalate his or her privileges on the system and gain access to sensitive information.

Record
EUVD-2017-16892
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
GitHub AdvisoriesGHSA-82r9-7ww3-jr86 10.0

An Improper Authentication issue was discovered in Hikvision DS-2CD2xx2F-I Series V5.2.0 build...

An Improper Authentication issue was discovered in Hikvision DS-2CD2xx2F-I Series V5.2.0 build 140721 to V5.4.0 build 160530, DS-2CD2xx0F-I Series V5.2.0 build 140721 to V5.4.0 Build 160401, DS-2CD2xx2FWD Series V5.3.1 build 150410 to V5.4.4 Build 161125, DS-2CD4x2xFWD Series V5.2.0 build 140721 to V5.4.0 Build 160414, DS-2CD4xx5 Series V5.2.0 build 140721 to V5.4.0 Build 160421, DS-2DFx Series V5.2.0 build 140805 to V5.4.5 Build 160928, and DS-2CD63xx Series V5.0.9 build 140305 to V5.3.5 Build 160106 devices. The improper authentication vulnerability occurs when an application does not adequately or correctly authenticate users. This may allow a malicious user to escalate his or her privileges on the system and gain access to sensitive information.

Record
GHSA-82r9-7ww3-jr86
CVSS 3.0
10.0 CriticalCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
Weakness
CWE-287
Updated
2026-11-02
CISA KEV No score

Hikvision Multiple Products Improper Authentication Vulnerability

Multiple Hikvision products contain an improper authentication vulnerability that could allow a malicious user to escalate privileges on the system and gain access to sensitive information.

Record
CVE-2017-7921
Weakness
CWE-287
Updated
2026-11-02

Affected products

Show 47 moreShow less

Public exploits

Links only. Every CVE stores no exploit code.

Public exploits
SourceLinkDate
PoC in GitHubJrDw0/CVE-2017-7921-EXP2020-04-27
PoC in GitHubBurnyMcDull/CVE-2017-79212020-11-12
PoC in GitHubMisakaMikato/cve-2017-7921-golang2020-11-13
PoC in GitHubchrisjd20/hikvision_CVE-2017-7921_auth_bypass_config_decryptor2021-01-29
PoC in GitHubp4tq/hikvision_CVE-2017-7921_auth_bypass_config_decryptor2022-06-15
PoC in GitHubalkaid176/CVE-2017-79212022-07-20
PoC in GitHubinj3ction/CVE-2017-7921-EXP2022-10-19
PoC in GitHubkrypton612/hikivision2023-07-04
PoC in GitHubAnonkiGroup/AnonHik2023-10-23
PoC in GitHubb3pwn3d/CVE-2017-79212023-11-20
Show 18 moreShow less
Public exploits
SourceLinkDate
PoC in GitHubkooroshsanaei/HikVision-CVE-2017-79212024-07-02
PoC in GitHubaengussong/hikvision_probe2024-11-26
PoC in GitHubGabrielAvls/CVE-2017-79212025-01-24
PoC in GitHublastvocher/Hikvision-CVE-2017-7921-decryptor2025-10-08
PoC in GitHubvoidsshadows/Hikvision-City-Hunter2025-11-19
PoC in GitHub0xf3d0rq/CVE-2017-79212025-11-27
PoC in GitHubsaaydmr/hikvision-exploiter2026-01-21
PoC in GitHubWyl-cmd/CVE-2017-7921-Research-Toolkit2026-01-28
PoC in GitHubmverschu/CVE-2017-79212026-02-09
PoC in GitHubKelvinWin10/CVE-2017-7921-rewrite2026-02-15
PoC in GitHubMK-ULTRA-project-monarch/CVE-2017-7921-Writeup-20262026-07-14
PoC in GitHubxjghnxhlh/hikihack2026-08-02
PoC in GitHubTh3Purge/CVE-2017-7921-Exploit2026-09-11
PoC in GitHubm7arm4n/CVE-2017-79212026-10-14
PoC in GitHubMK-ULTRA-MK-ULTRA/CVE-2017-7921-2026-writeup2026-10-27
MetasploitHikvision IP Camera Unauthenticated Password Change Via Improper Authentication Logic2017-09-23
MetasploitUnauthenticated information disclosure such as configuration, credentials and camera snapshots of a vulnerable Hikvision IP Camera2017-09-23
NucleiHikvision - Authentication Bypass

Plus 2 more. The full list has every link.

History

History
RecordedChangedSources
exploits_morePoC in GitHub
exploitation
exploits
exploits
first indexedCVE List, EUVD, GitHub Advisories, CISA KEV, Metasploit, Nuclei, NVD, PoC in GitHub

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2017-7921 is a critical vulnerability (CVSS 9.8) in Hikvision Ds-2cd2032-i Firmware, published May 6, 2017. CISA lists it as known to be exploited, since March 5, 2026. EUVD reports exploitation since March 5, 2026. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 100.0%, the 99th percentile. No source names a fixed version.

References

Show 4 moreShow less
Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open