Hikvision Ds-2cd4112f-I(z) Firmware vulnerabilities

2 CVEs affecting Hikvision Ds-2cd4112f-I(z) Firmware, 1 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2017-7923, published 2017-05-06.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2017-7921: Hikvision Multiple Products Improper Authentication Vulnerability, published 2017-05-06. Critical severity, CVSS 9.8. Actively exploited: in CISA KEV since 2026-03-05. EPSS: 100% chance of exploitation in the next 30 days. An Improper Authentication issue was discovered in Hikvision DS-2CD2xx2F-I Series V5.2.0 build 140721 to V5.4.0 build 160530, DS-2CD2xx0F-I Series V5.2.0 build 140721 to V5.4.0 Build 160401,…
CVE-2017-7923, published 2017-05-06. High severity, CVSS 8.8. EPSS: 2.3% chance of exploitation in the next 30 days. A Password in Configuration File issue was discovered in Hikvision DS-2CD2xx2F-I Series V5.2.0 build 140721 to V5.4.0 build 160530, DS-2CD2xx0F-I Series V5.2.0 build 140721 to V5.4.0 Build 160401,…