CVE-2017-7921

Description

An Improper Authentication issue was discovered in Hikvision DS-2CD2xx2F-I Series V5.2.0 build 140721 to V5.4.0 build 160530, DS-2CD2xx0F-I Series V5.2.0 build 140721 to V5.4.0 Build 160401, DS-2CD2xx2FWD Series V5.3.1 build 150410 to V5.4.4 Build 161125, DS-2CD4x2xFWD Series V5.2.0 build 140721 to V5.4.0 Build 160414, DS-2CD4xx5 Series V5.2.0 build 140721 to V5.4.0 Build 160421, DS-2DFx Series V5.2.0 build 140805 to V5.4.5 Build 160928, and DS-2CD63xx Series V5.0.9 build 140305 to V5.3.5 Build 160106 devices. The improper authentication vulnerability occurs when an application does not adequately or correctly authenticate users. This may allow a malicious user to escalate his or her privileges on the system and gain access to sensitive information.

Overview

State: —
Assigner (CNA): —
CVSS severity: —
CVSS score: —
CVSS vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Effective score: 9.8 / 10 CRITICAL source: NVD
CWE(s): —
Reserved: —
Published: 2017-05-05 00:00 UTC
Last updated: —
Source: https://www.rapid7.com/db/vulnerabilities/hikvision-ip-camera-cve-2017-7921/
Linked Threat: CVE-2017-7921 — Hikvision Multiple Products: Hikvision Multiple Products Improper Authentication Vulnerability

CISA Known Exploited Vulnerabilities CISA KEV

CISA has confirmed in-the-wild exploitation of this CVE. Federal agencies must remediate by the due date below; private orgs should treat it as priority-1.

Vulnerability name: Hikvision Multiple Products Improper Authentication Vulnerability
Vendor / project: Hikvision
Product: Multiple Products
Date added to KEV: 2026-03-05
Remediation due: 2026-03-26
Required action: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.
Ransomware campaign use: Unknown
CISA notes: https://www.hikvision.com/us-en/support/document-center/special-notices/privilege-escalating-vulnerability-in-certain-hikvision-ip-cameras/ ; https://nvd.nist.gov/vuln/detail/CVE-2017-7921
CISA listing: www.cisa.gov/known-exploited-vulnerabilities-catalog

NVD triage scoring NVD CVE 2.0

Layer NVD adds on top of the CNA's CVE record — published / last-modified timestamps, exploitability / impact subscores, and the FIRST.org EPSS probability that this CVE will be exploited in the wild in the next 30 days.

NVD published: 2017-05-06 00:29:00 UTC
NVD last modified: 2026-06-17 01:25:28 UTC
NVD CVSS v3.1: 9.8 / 10 CRITICAL source: nvd@nist.gov
NVD CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Exploitability subscore: 3.9 / 10
Impact subscore: 5.9 / 10
EPSS score: 1.0000 (probability of exploitation in next 30 days)
EPSS percentile: 99.99% vs all CVEs — higher = more likely to be exploited, as of 2026-06-29

NVD-assigned CWE(s): CWE-287 (differs from the CNA list above)

European Union Vulnerability Database ENISA EUVD

ENISA's official EU repository for curated vulnerability intelligence. Carries a separate identifier (EUVD-YYYY-NNNN) and frequently exposes an earlier-published description + CVSS than NVD does.

EUVD ID: EUVD-2017-16892

EUVD enrichment is queued; refresh the page in a few seconds.

Affected products — CPE 2.3 (116) NVD

NVD's normalized CPE 2.3 matchers, used by vendor tools (vulnerability scanners, asset managers) for automated detection. Compare with the CNA's free-text "Affected products" section above.

cpe:2.3:o:hikvision:ds-2cd2032-i_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:hikvision:ds-2cd2112-i_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:hikvision:ds-2cd2132-i_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:hikvision:ds-2cd2212-i5_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:hikvision:ds-2cd2232-i5_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:hikvision:ds-2cd2312-i_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:hikvision:ds-2cd2332-i_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:hikvision:ds-2cd2412f-i\(w\)_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:hikvision:ds-2cd2432f-i\(w\)_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:hikvision:ds-2cd2512f-i\(s\)_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:hikvision:ds-2cd2532f-i\(s\)_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:hikvision:ds-2cd2612f-i\(s\)_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:hikvision:ds-2cd2632f-i\(s\)_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:hikvision:ds-2cd2712f-i\(s\)_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:hikvision:ds-2cd2732f-i\(s\)_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:hikvision:ds-2cd2t32-i3_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:hikvision:ds-2cd2t32-i5_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:hikvision:ds-2cd2t32-i8_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:hikvision:ds-2cd4012f-\(a\)_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:hikvision:ds-2cd4012f-\(p\)_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:hikvision:ds-2cd4012f-\(w\)_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:hikvision:ds-2cd4012fwd-\(a\)_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:hikvision:ds-2cd4012fwd-\(p\)_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:hikvision:ds-2cd4012fwd-\(w\)_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:hikvision:ds-2cd4024f-\(a\)_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:hikvision:ds-2cd4024f-\(p\)_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:hikvision:ds-2cd4024f-\(w\)_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:hikvision:ds-2cd4032fwd-\(a\)_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:hikvision:ds-2cd4032fwd-\(p\)_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:hikvision:ds-2cd4032fwd-\(w\)_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:hikvision:ds-2cd4112f-i\(z\)_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:hikvision:ds-2cd4112fwd-i\(z\)_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:hikvision:ds-2cd4124f-i\(z\)_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:hikvision:ds-2cd4132fwd-i\(z\)_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:hikvision:ds-2cd4212f-i\(h\)_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:hikvision:ds-2cd4212f-i\(s\)_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:hikvision:ds-2cd4212f-i\(z\)_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:hikvision:ds-2cd4212fwd-i\(h\)_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:hikvision:ds-2cd4212fwd-i\(s\)_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:hikvision:ds-2cd4212fwd-i\(z\)_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:hikvision:ds-2cd4224f-i\(h\)_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:hikvision:ds-2cd4224f-i\(s\)_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:hikvision:ds-2cd4224f-i\(z\)_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:hikvision:ds-2cd4232fwd-i\(h\)_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:hikvision:ds-2cd4232fwd-i\(s\)_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:hikvision:ds-2cd4232fwd-i\(z\)_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:hikvision:ds-2cd4312f-i\(h\)_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:hikvision:ds-2cd4312f-i\(s\)_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:hikvision:ds-2cd4312f-i\(z\)_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:hikvision:ds-2cd4324f-i\(h\)_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:hikvision:ds-2cd4324f-i\(s\)_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:hikvision:ds-2cd4324f-i\(z\)_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:hikvision:ds-2cd4332fwd-i\(h\)_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:hikvision:ds-2cd4332fwd-i\(s\)_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:hikvision:ds-2cd4332fwd-i\(z\)_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:hikvision:ds-2cd6412fwd_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:hikvision:ds-2cd2032-i:-:*:*:*:*:*:*:*
cpe:2.3:h:hikvision:ds-2cd2112-i:-:*:*:*:*:*:*:*
cpe:2.3:h:hikvision:ds-2cd2132-i:-:*:*:*:*:*:*:*
cpe:2.3:h:hikvision:ds-2cd2212-i5:-:*:*:*:*:*:*:*
cpe:2.3:h:hikvision:ds-2cd2232-i5:-:*:*:*:*:*:*:*
cpe:2.3:h:hikvision:ds-2cd2312-i:-:*:*:*:*:*:*:*
cpe:2.3:h:hikvision:ds-2cd2332-i:-:*:*:*:*:*:*:*
cpe:2.3:h:hikvision:ds-2cd2412f-i\(w\):-:*:*:*:*:*:*:*
cpe:2.3:h:hikvision:ds-2cd2432f-i\(w\):-:*:*:*:*:*:*:*
cpe:2.3:h:hikvision:ds-2cd2512f-i\(s\):-:*:*:*:*:*:*:*
cpe:2.3:h:hikvision:ds-2cd2532f-i\(s\):-:*:*:*:*:*:*:*
cpe:2.3:h:hikvision:ds-2cd2612f-i\(s\):-:*:*:*:*:*:*:*
cpe:2.3:h:hikvision:ds-2cd2632f-i\(s\):-:*:*:*:*:*:*:*
cpe:2.3:h:hikvision:ds-2cd2712f-i\(s\):-:*:*:*:*:*:*:*
cpe:2.3:h:hikvision:ds-2cd2732f-i\(s\):-:*:*:*:*:*:*:*
cpe:2.3:h:hikvision:ds-2cd2t32-i3:-:*:*:*:*:*:*:*
cpe:2.3:h:hikvision:ds-2cd2t32-i5:-:*:*:*:*:*:*:*
cpe:2.3:h:hikvision:ds-2cd2t32-i8:-:*:*:*:*:*:*:*
cpe:2.3:h:hikvision:ds-2cd4012f-\(a\):-:*:*:*:*:*:*:*
cpe:2.3:h:hikvision:ds-2cd4012f-\(p\):-:*:*:*:*:*:*:*
cpe:2.3:h:hikvision:ds-2cd4012f-\(w\):-:*:*:*:*:*:*:*
cpe:2.3:h:hikvision:ds-2cd4012fwd-\(a\):-:*:*:*:*:*:*:*
cpe:2.3:h:hikvision:ds-2cd4012fwd-\(p\):-:*:*:*:*:*:*:*
cpe:2.3:h:hikvision:ds-2cd4012fwd-\(w\):-:*:*:*:*:*:*:*
cpe:2.3:h:hikvision:ds-2cd4024f-\(a\):-:*:*:*:*:*:*:*
cpe:2.3:h:hikvision:ds-2cd4024f-\(p\):-:*:*:*:*:*:*:*
cpe:2.3:h:hikvision:ds-2cd4024f-\(w\):-:*:*:*:*:*:*:*
cpe:2.3:h:hikvision:ds-2cd4032fwd-\(a\):-:*:*:*:*:*:*:*
cpe:2.3:h:hikvision:ds-2cd4032fwd-\(p\):-:*:*:*:*:*:*:*
cpe:2.3:h:hikvision:ds-2cd4032fwd-\(w\):-:*:*:*:*:*:*:*
cpe:2.3:h:hikvision:ds-2cd4112f-i\(z\):-:*:*:*:*:*:*:*
cpe:2.3:h:hikvision:ds-2cd4112fwd-i\(z\):-:*:*:*:*:*:*:*
cpe:2.3:h:hikvision:ds-2cd4124f-i\(z\):-:*:*:*:*:*:*:*
cpe:2.3:h:hikvision:ds-2cd4132fwd-i\(z\):-:*:*:*:*:*:*:*
cpe:2.3:h:hikvision:ds-2cd4212f-i\(h\):-:*:*:*:*:*:*:*
cpe:2.3:h:hikvision:ds-2cd4212f-i\(s\):-:*:*:*:*:*:*:*
cpe:2.3:h:hikvision:ds-2cd4212f-i\(z\):-:*:*:*:*:*:*:*
cpe:2.3:h:hikvision:ds-2cd4212fwd-i\(h\):-:*:*:*:*:*:*:*
cpe:2.3:h:hikvision:ds-2cd4212fwd-i\(s\):-:*:*:*:*:*:*:*
cpe:2.3:h:hikvision:ds-2cd4212fwd-i\(z\):-:*:*:*:*:*:*:*
cpe:2.3:h:hikvision:ds-2cd4224f-i\(h\):-:*:*:*:*:*:*:*
cpe:2.3:h:hikvision:ds-2cd4224f-i\(s\):-:*:*:*:*:*:*:*
cpe:2.3:h:hikvision:ds-2cd4224f-i\(z\):-:*:*:*:*:*:*:*
cpe:2.3:h:hikvision:ds-2cd4232fwd-i\(h\):-:*:*:*:*:*:*:*
cpe:2.3:h:hikvision:ds-2cd4232fwd-i\(s\):-:*:*:*:*:*:*:*
cpe:2.3:h:hikvision:ds-2cd4232fwd-i\(z\):-:*:*:*:*:*:*:*
cpe:2.3:h:hikvision:ds-2cd4312f-i\(h\):-:*:*:*:*:*:*:*
cpe:2.3:h:hikvision:ds-2cd4312f-i\(s\):-:*:*:*:*:*:*:*
cpe:2.3:h:hikvision:ds-2cd4312f-i\(z\):-:*:*:*:*:*:*:*
cpe:2.3:h:hikvision:ds-2cd4324f-i\(h\):-:*:*:*:*:*:*:*
cpe:2.3:h:hikvision:ds-2cd4324f-i\(s\):-:*:*:*:*:*:*:*
cpe:2.3:h:hikvision:ds-2cd4324f-i\(z\):-:*:*:*:*:*:*:*
cpe:2.3:h:hikvision:ds-2cd4332fwd-i\(h\):-:*:*:*:*:*:*:*
cpe:2.3:h:hikvision:ds-2cd4332fwd-i\(s\):-:*:*:*:*:*:*:*
cpe:2.3:h:hikvision:ds-2cd4332fwd-i\(z\):-:*:*:*:*:*:*:*
cpe:2.3:h:hikvision:ds-2cd6412fwd:-:*:*:*:*:*:*:*
cpe:2.3:o:hikvision:ds-2dfx_series_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:hikvision:ds-2dfx_series:-:*:*:*:*:*:*:*
cpe:2.3:o:hikvision:ds-2cd63xx_series_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:hikvision:ds-2cd63xx_series:-:*:*:*:*:*:*:*

Vendor references (0)

References embedded in the original CVE record by the assigning CNA.

None in the CVE record.

MITRE references (3) cveawg.mitre.org

Pulled from MITRE's CVE Services API by the 🛰 Backfill from MITRE button.

https://ghostbin.com/paste/q2vq2 x_refsource_MISC
http://www.hikvision.com/us/about_10805.html x_refsource_MISC
98313 vdb-entry, x_refsource_BID

Web references (6)

DuckDuckGo results ranked by threat-intel / vendor advisory domains. Generated by the 🔎 Find references (web) button above — same flow as the Remediations search.

http://cwe.mitre.org/data/definitions/287.html rapid7:cwe.mitre.org
https://www.cve.org/CVERecord?id=CVE-2017-7921 rapid7:www.cve.org
https://www.hikvision.com/us/about_10805.html rapid7:www.hikvision.com
https://nvd.nist.gov/vuln/detail/CVE-2017-7921 rapid7:nvd.nist.gov
https://attackerkb.com/topics/CVE-2017-7921 rapid7:attackerkb.com
https://ics-cert.us-cert.gov/advisories/ICSA-17-124-01 rapid7:ics-cert.us-cert.gov

NVD-tagged references (12)

Reference list NVD curates from the CNA record, vendor advisories, and third-party reports. The tag chips below are NVD's analyst-assigned categories.

http://www.hikvision.com/us/about_10805.html ics-cert@hq.dhs.gov PatchVendor Advisory
http://www.hikvision.com/us/about_10805.html af854a3a-2127-422b-91ae-364da2661108 PatchVendor Advisory
http://www.securityfocus.com/bid/98313 ics-cert@hq.dhs.gov Broken LinkThird Party AdvisoryVDB Entry
http://www.securityfocus.com/bid/98313 af854a3a-2127-422b-91ae-364da2661108 Broken LinkThird Party AdvisoryVDB Entry
https://ghostbin.com/paste/q2vq2 ics-cert@hq.dhs.gov Broken Link
https://ghostbin.com/paste/q2vq2 af854a3a-2127-422b-91ae-364da2661108 Broken Link
https://ics-cert.us-cert.gov/advisories/ICSA-17-124-01 ics-cert@hq.dhs.gov Third Party AdvisoryUS Government Resource
https://ics-cert.us-cert.gov/advisories/ICSA-17-124-01 af854a3a-2127-422b-91ae-364da2661108 Third Party AdvisoryUS Government Resource
https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2017-7921 134c704f-9b21-4f2e-91b3-4a467353bcc0 US Government Resource
https://www.hikvision.com/cn/support/CybersecurityCenter/SecurityNotices/20170314/ af854a3a-2127-422b-91ae-364da2661108 Third Party Advisory
https://www.hikvision.com/en/support/cybersecurity/security-advisory/security-notification--privilege-escalating-vulnerability-in-cer/ af854a3a-2127-422b-91ae-364da2661108 Third Party Advisory
https://www.hikvision.com/us-en/support/document-center/special-notices/privilege-escalating-vulnerability-in-certain-hikvision-ip-cameras/ af854a3a-2127-422b-91ae-364da2661108 Third Party Advisory

Indicators (2)

IOCs linked to the auto-promoted Threat row.

Type	Value	VirusTotal	Attached
cwe	`CWE-287`	no local data	2026-05-14 02:58 UTC
cve	`CVE-2017-7921`	no local data	2026-05-14 02:58 UTC

Remediations (11)

Remediations are stored against the linked Threat row; the list below is deduplicated across both pages.

THREAT ADVISORY RedSun Zero-Day (Windows Defender) April 17, 2026

web:blackswan-cybersecurity.com

Cloud Files API activity originating outside legitimate OneDrive/sync processes. Mitigation Steps: Apply all Windows updates immediately (monitor MSRC for an emergency RedSun-specific patch . None released as of April 17, 2026). Supplement Defender with a secondary EDR solution (e.g., Huntress) capable of detecting Defender bypasses.

2026-06-04 08:37 UTC
Mitigate RedSun Zero-Day Without A Patch | Qualys

web:blog.qualys.com

Key Takeaways RedSun is a critical zero-day vulnerability in Microsoft Defender that allows low-privileged users to gain SYSTEM access No patch is currently available, leaving all Defender-enabled Windows systems potentially exposed Qualys VMDR detects affected assets instantly (QID 92382) TruRisk™ Eliminate enables immediate mitigation , removing exploitability without waiting for a fix ...

2026-06-04 08:37 UTC
Feedly Patch Tuesday Report—searchable, scannable, and exportable

web:feedly.com

The monthly event has become known as Patch Tuesday and frequently includes product fixes for over 100 flaws, including critical vulnerabilities and zero-day exploits. As a vulnerability manager or CTI analyst, you need to quickly understand the potential threats against your infrastructure and prioritize remediation activities.

2026-06-04 08:37 UTC
Remediate vulnerabilities with Microsoft Defender Vulnerability ...

web:learn.microsoft.com

Remediate security weaknesses discovered through security recommendations, and create exceptions if needed, in Defender Vulnerability Management.

2026-06-04 08:37 UTC
Security Update Guide - Microsoft

web:portal.msrc.microsoft.com

The Security Update Guide provides information on the latest Microsoft security updates, helping users understand and address potential vulnerabilities effectively.

2026-06-04 08:37 UTC
How Soon Should Vulnerabilities Be Patched? - Tandem

web:tandem.app

Vulnerability and patch management are essential for maintaining security-leaving vulnerabilities unaddressed is like leaving your front door wide open. But how quickly must you patch to remain secure and compliant? Let's break it down.

2026-06-04 08:37 UTC
Determine Fix for IOS XE Software Web UI - Cisco

web:www.cisco.com

This document describes a list of software versions that have incorporated fixes for Cisco IOS® XE Software Web UI Cisco bug ID CSCwh87343.

2026-06-04 08:37 UTC
What To Do If You Can't Patch A Software Vulnerability - Forbes

web:www.forbes.com

Mitigation Measures To Take If Patching Isn't Possible Assuming a patch can't be promptly applied, what can be done to mitigate risk? There are several important measures to keep in mind:

2026-06-04 08:37 UTC
Oracle Critical Patch Update Advisory - April 2026

web:www.oracle.com

This Critical Patch Update contains 481 new security patches across the product families listed below. Please note that an MOS note summarizing the content of this Critical Patch Update and other Oracle Software Security Assurance activities is located at April 2026 Critical Patch Update: Executive Summary and Analysis.

2026-06-04 08:37 UTC
Rapid7 Vulnerability & Exploit Database | CVE Insights

web:www.rapid7.com

Search verified CVE data, exploit details, and remediation insights curated by Rapid7 Labs. Stay informed on the latest vulnerabilities and public exploits.

2026-06-04 08:37 UTC
CISA Required Action

CISA KEV

Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable. Due date: 2026-03-26 Known ransomware campaign use: Unknown

2026-05-14 01:13 UTC

AI Forensic Analysis

Only Available for Registered Users. Sign in to view.

Raw JSON

The full cvelistV5 record. Download as CVE-2017-7921.json.

Not stored.