{"id":"CVE-2017-7923","aliases":["EUVD-2017-16894","GHSA-m7r5-29r2-m6xh"],"status":"published","title":"A Password in Configuration File issue was discovered in Hikvision DS-2CD2xx2F-I Series V5.2.0...","description":"A Password in Configuration File issue was discovered in Hikvision DS-2CD2xx2F-I Series V5.2.0 build 140721 to V5.4.0 build 160530, DS-2CD2xx0F-I Series V5.2.0 build 140721 to V5.4.0 Build 160401, DS-2CD2xx2FWD Series V5.3.1 build 150410 to V5.4.4 Build 161125, DS-2CD4x2xFWD Series V5.2.0 build 140721 to V5.4.0 Build 160414, DS-2CD4xx5 Series V5.2.0 build 140721 to V5.4.0 Build 160421, DS-2DFx Series V5.2.0 build 140805 to V5.4.5 Build 160928, and DS-2CD63xx Series V5.0.9 build 140305 to V5.3.5 Build 160106 devices. The password in configuration file vulnerability could allow a malicious user to escalate privileges or assume the identity of another user and access sensitive information.","severity":{"version":"3.0","score":8.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.0231,"percentile":0.83495,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-200","CWE-260"],"published":"2017-05-06T00:00:00Z","modified":"2026-06-17T01:25:29Z","products":[{"vendor":"hikvision","product":"ds-2cd2032-i_firmware"},{"vendor":"hikvision","product":"ds-2cd2112-i_firmware"},{"vendor":"hikvision","product":"ds-2cd2132-i_firmware"},{"vendor":"hikvision","product":"ds-2cd2212-i5_firmware"},{"vendor":"hikvision","product":"ds-2cd2232-i5_firmware"},{"vendor":"hikvision","product":"ds-2cd2312-i_firmware"},{"vendor":"hikvision","product":"ds-2cd2332-i_firmware"},{"vendor":"hikvision","product":"ds-2cd2412f-i\\(w\\)_firmware"},{"vendor":"hikvision","product":"ds-2cd2432f-i\\(w\\)_firmware"},{"vendor":"hikvision","product":"ds-2cd2512f-i\\(s\\)_firmware"},{"vendor":"hikvision","product":"ds-2cd2532f-i\\(s\\)_firmware"},{"vendor":"hikvision","product":"ds-2cd2612f-i\\(s\\)_firmware"},{"vendor":"hikvision","product":"ds-2cd2632f-i\\(s\\)_firmware"},{"vendor":"hikvision","product":"ds-2cd2712f-i\\(s\\)_firmware"},{"vendor":"hikvision","product":"ds-2cd2732f-i\\(s\\)_firmware"},{"vendor":"hikvision","product":"ds-2cd2t32-i3_firmware"},{"vendor":"hikvision","product":"ds-2cd2t32-i5_firmware"},{"vendor":"hikvision","product":"ds-2cd2t32-i8_firmware"},{"vendor":"hikvision","product":"ds-2cd4012f-\\(a\\)_firmware"},{"vendor":"hikvision","product":"ds-2cd4012f-\\(p\\)_firmware"},{"vendor":"hikvision","product":"ds-2cd4012f-\\(w\\)_firmware"},{"vendor":"hikvision","product":"ds-2cd4012fwd-\\(a\\)_firmware"},{"vendor":"hikvision","product":"ds-2cd4012fwd-\\(p\\)_firmware"},{"vendor":"hikvision","product":"ds-2cd4012fwd-\\(w\\)_firmware"},{"vendor":"hikvision","product":"ds-2cd4024f-\\(a\\)_firmware"},{"vendor":"hikvision","product":"ds-2cd4024f-\\(p\\)_firmware"},{"vendor":"hikvision","product":"ds-2cd4024f-\\(w\\)_firmware"},{"vendor":"hikvision","product":"ds-2cd4032fwd-\\(a\\)_firmware"},{"vendor":"hikvision","product":"ds-2cd4032fwd-\\(p\\)_firmware"},{"vendor":"hikvision","product":"ds-2cd4032fwd-\\(w\\)_firmware"},{"vendor":"hikvision","product":"ds-2cd4112f-i\\(z\\)_firmware"},{"vendor":"hikvision","product":"ds-2cd4112fwd-i\\(z\\)_firmware"},{"vendor":"hikvision","product":"ds-2cd4124f-i\\(z\\)_firmware"},{"vendor":"hikvision","product":"ds-2cd4132fwd-i\\(z\\)_firmware"},{"vendor":"hikvision","product":"ds-2cd4212f-i\\(h\\)_firmware"},{"vendor":"hikvision","product":"ds-2cd4212f-i\\(s\\)_firmware"},{"vendor":"hikvision","product":"ds-2cd4212f-i\\(z\\)_firmware"},{"vendor":"hikvision","product":"ds-2cd4212fwd-i\\(h\\)_firmware"},{"vendor":"hikvision","product":"ds-2cd4212fwd-i\\(s\\)_firmware"},{"vendor":"hikvision","product":"ds-2cd4212fwd-i\\(z\\)_firmware"},{"vendor":"hikvision","product":"ds-2cd4224f-i\\(h\\)_firmware"},{"vendor":"hikvision","product":"ds-2cd4224f-i\\(s\\)_firmware"},{"vendor":"hikvision","product":"ds-2cd4224f-i\\(z\\)_firmware"},{"vendor":"hikvision","product":"ds-2cd4232fwd-i\\(h\\)_firmware"},{"vendor":"hikvision","product":"ds-2cd4232fwd-i\\(s\\)_firmware"},{"vendor":"hikvision","product":"ds-2cd4232fwd-i\\(z\\)_firmware"},{"vendor":"hikvision","product":"ds-2cd4312f-i\\(h\\)_firmware"},{"vendor":"hikvision","product":"ds-2cd4312f-i\\(s\\)_firmware"},{"vendor":"hikvision","product":"ds-2cd4312f-i\\(z\\)_firmware"},{"vendor":"hikvision","product":"ds-2cd4324f-i\\(h\\)_firmware"},{"vendor":"hikvision","product":"ds-2cd4324f-i\\(s\\)_firmware"},{"vendor":"hikvision","product":"ds-2cd4324f-i\\(z\\)_firmware"},{"vendor":"hikvision","product":"ds-2cd4332fwd-i\\(h\\)_firmware"},{"vendor":"hikvision","product":"ds-2cd4332fwd-i\\(s\\)_firmware"},{"vendor":"hikvision","product":"ds-2cd4332fwd-i\\(z\\)_firmware"},{"vendor":"hikvision","product":"ds-2cd63xx_series_firmware"},{"vendor":"hikvision","product":"ds-2cd6412fwd_firmware"},{"vendor":"hikvision","product":"ds-2dfx_series_firmware"}],"references":[{"url":"https://ics-cert.us-cert.gov/advisories/ICSA-17-124-01","tags":["x_refsource_MISC","x_transferred","Third Party Advisory","US Government Resource"]},{"url":"http://www.securityfocus.com/bid/98313","tags":["vdb-entry","x_refsource_BID","x_transferred","Third Party Advisory","VDB Entry"]},{"url":"https://ghostbin.com/paste/q2vq2","tags":["x_refsource_MISC","x_transferred"]},{"url":"http://www.hikvision.com/us/about_10807.html","tags":["x_refsource_MISC","x_transferred","Patch","Vendor Advisory"]},{"url":"https://www.hikvision.com/us-en/support/document-center/special-notices/privilege-escalating-vulnerability-in-certain-hikvision-ip-cameras/"},{"url":"https://www.hikvision.com/cn/support/CybersecurityCenter/SecurityNotices/20170314/"},{"url":"https://www.hikvision.com/en/support/cybersecurity/security-advisory/security-notification--privilege-escalating-vulnerability-in-cer/"},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-7923"},{"url":"https://www.hikvision.com/cn/support/CybersecurityCenter/SecurityNotices/20170314"},{"url":"https://www.hikvision.com/en/support/cybersecurity/security-advisory/security-notification--privilege-escalating-vulnerability-in-cer"},{"url":"https://www.hikvision.com/us-en/support/document-center/special-notices/privilege-escalating-vulnerability-in-certain-hikvision-ip-cameras"},{"url":"https://github.com/advisories/GHSA-m7r5-29r2-m6xh"}],"sources":{"cve":[{"id":"CVE-2017-7923","description":"A Password in Configuration File issue was discovered in Hikvision DS-2CD2xx2F-I Series V5.2.0 build 140721 to V5.4.0 build 160530, DS-2CD2xx0F-I Series V5.2.0 build 140721 to V5.4.0 Build 160401, DS-2CD2xx2FWD Series V5.3.1 build 150410 to V5.4.4 Build 161125, DS-2CD4x2xFWD Series V5.2.0 build 140721 to V5.4.0 Build 160414, DS-2CD4xx5 Series V5.2.0 build 140721 to V5.4.0 Build 160421, DS-2DFx Series V5.2.0 build 140805 to V5.4.5 Build 160928, and DS-2CD63xx Series V5.0.9 build 140305 to V5.3.5 Build 160106 devices. The password in configuration file vulnerability could allow a malicious user to escalate privileges or assume the identity of another user and access sensitive information.","status":"published","published":"2017-05-06T00:00:00Z","modified":"2024-12-27T20:58:21.46Z","cwes":["CWE-260"],"updated_at":"2026-11-02T14:33:20.843976Z"}],"euvd":[{"id":"EUVD-2017-16894","description":"A Password in Configuration File issue was discovered in Hikvision DS-2CD2xx2F-I Series V5.2.0 build 140721 to V5.4.0 build 160530, DS-2CD2xx0F-I Series V5.2.0 build 140721 to V5.4.0 Build 160401, DS-2CD2xx2FWD Series V5.3.1 build 150410 to V5.4.4 Build 161125, DS-2CD4x2xFWD Series V5.2.0 build 140721 to V5.4.0 Build 160414, DS-2CD4xx5 Series V5.2.0 build 140721 to V5.4.0 Build 160421, DS-2DFx Series V5.2.0 build 140805 to V5.4.5 Build 160928, and DS-2CD63xx Series V5.0.9 build 140305 to V5.3.5 Build 160106 devices. The password in configuration file vulnerability could allow a malicious user to escalate privileges or assume the identity of another user and access sensitive information.","status":"published","published":"2017-05-06T00:00:00Z","modified":"2024-12-27T20:58:21Z","updated_at":"2026-11-03T00:04:32.209772Z"}],"ghsa":[{"id":"GHSA-m7r5-29r2-m6xh","title":"A Password in Configuration File issue was discovered in Hikvision DS-2CD2xx2F-I Series V5.2.0...","description":"A Password in Configuration File issue was discovered in Hikvision DS-2CD2xx2F-I Series V5.2.0 build 140721 to V5.4.0 build 160530, DS-2CD2xx0F-I Series V5.2.0 build 140721 to V5.4.0 Build 160401, DS-2CD2xx2FWD Series V5.3.1 build 150410 to V5.4.4 Build 161125, DS-2CD4x2xFWD Series V5.2.0 build 140721 to V5.4.0 Build 160414, DS-2CD4xx5 Series V5.2.0 build 140721 to V5.4.0 Build 160421, DS-2DFx Series V5.2.0 build 140805 to V5.4.5 Build 160928, and DS-2CD63xx Series V5.0.9 build 140305 to V5.3.5 Build 160106 devices. The password in configuration file vulnerability could allow a malicious user to escalate privileges or assume the identity of another user and access sensitive information.","status":"published","published":"2022-05-17T00:13:28Z","modified":"2024-12-27T21:30:30Z","cvss":[{"version":"3.0","score":8.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"cwes":["CWE-200","CWE-260"],"updated_at":"2026-11-02T14:59:17.039565Z"}],"nvd":[{"id":"CVE-2017-7923","description":"A Password in Configuration File issue was discovered in Hikvision DS-2CD2xx2F-I Series V5.2.0 build 140721 to V5.4.0 build 160530, DS-2CD2xx0F-I Series V5.2.0 build 140721 to V5.4.0 Build 160401, DS-2CD2xx2FWD Series V5.3.1 build 150410 to V5.4.4 Build 161125, DS-2CD4x2xFWD Series V5.2.0 build 140721 to V5.4.0 Build 160414, DS-2CD4xx5 Series V5.2.0 build 140721 to V5.4.0 Build 160421, DS-2DFx Series V5.2.0 build 140805 to V5.4.5 Build 160928, and DS-2CD63xx Series V5.0.9 build 140305 to V5.3.5 Build 160106 devices. The password in configuration file vulnerability could allow a malicious user to escalate privileges or assume the identity of another user and access sensitive information.","status":"published","published":"2017-05-06T00:29:00.38Z","modified":"2026-06-17T01:25:29.253Z","cvss":[{"version":"3.0","score":8.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"primary"},{"version":"2.0","score":4,"vector":"AV:N/AC:L/Au:S/C:P/I:N/A:N","level":"medium","assessor":"primary"}],"cwes":["CWE-260","CWE-200"],"updated_at":"2026-11-02T14:03:47.848196Z"}]}}