CVE-2017-7921: Hikvision Multiple Products Improper Authentication Vulnerability

Critical severity, CVSS 9.8. Actively exploited: in CISA KEV since 2026-03-05. EPSS: 100% chance of exploitation in the next 30 days.

An Improper Authentication issue was discovered in Hikvision DS-2CD2xx2F-I Series V5.2.0 build 140721 to V5.4.0 build 160530, DS-2CD2xx0F-I Series V5.2.0 build 140721 to V5.4.0 Build 160401, DS-2CD2xx2FWD Series V5.3.1 build 150410 to V5.4.4 Build 161125, DS-2CD4x2xFWD Series V5.2.0 build 140721 to V5.4.0 Build 160414, DS-2CD4xx5 Series V5.2.0 build 140721 to V5.4.0 Build 160421, DS-2DFx Series V5.2.0 build 140805 to V5.4.5 Build 160928, and DS-2CD63xx Series V5.0.9 build 140305 to V5.3.5 Build 160106 devices. The improper authentication vulnerability occurs when an application does not adequately or correctly authenticate users. This may allow a malicious user to escalate his or her privileges on the system and gain access to sensitive information.

Affected products

• Hikvision Ds-2cd2032-I Firmware: affected versions not specified
• Hikvision Ds-2cd2112-I Firmware: affected versions not specified
• Hikvision Ds-2cd2132-I Firmware: affected versions not specified
• Hikvision Ds-2cd2212-i5 Firmware: affected versions not specified
• Hikvision Ds-2cd2232-i5 Firmware: affected versions not specified
• Hikvision Ds-2cd2312-I Firmware: affected versions not specified
• Hikvision Ds-2cd2332-I Firmware: affected versions not specified
• Hikvision Ds-2cd2412f-I(w) Firmware: affected versions not specified
• Hikvision Ds-2cd2432f-I(w) Firmware: affected versions not specified
• Hikvision Ds-2cd2512f-I(s) Firmware: affected versions not specified
• Hikvision Ds-2cd2532f-I(s) Firmware: affected versions not specified
• Hikvision Ds-2cd2612f-I(s) Firmware: affected versions not specified
• Hikvision Ds-2cd2632f-I(s) Firmware: affected versions not specified
• Hikvision Ds-2cd2712f-I(s) Firmware: affected versions not specified
• Hikvision Ds-2cd2732f-I(s) Firmware: affected versions not specified
• Hikvision Ds-2cd2t32-i3 Firmware: affected versions not specified
• Hikvision Ds-2cd2t32-i5 Firmware: affected versions not specified
• Hikvision Ds-2cd2t32-i8 Firmware: affected versions not specified
• Hikvision Ds-2cd4012f-(a) Firmware: affected versions not specified
• Hikvision Ds-2cd4012f-(p) Firmware: affected versions not specified
• Hikvision Ds-2cd4012f-(w) Firmware: affected versions not specified
• Hikvision Ds-2cd4012fwd-(a) Firmware: affected versions not specified
• Hikvision Ds-2cd4012fwd-(p) Firmware: affected versions not specified
• Hikvision Ds-2cd4012fwd-(w) Firmware: affected versions not specified
• Hikvision Ds-2cd4024f-(a) Firmware: affected versions not specified
• and 33 more

Published 2017-05-06. Last modified 2026-06-17.