CVE-2017-7921

CVE-2017-7921 is a critical-severity vulnerability in Hikvision Ds-2cd2032-i Firmware with a CVSS 3.x base score of 9.8. It is listed in CISA's Known Exploited Vulnerabilities (KEV) catalog, confirming it has been exploited in the wild (added 2026-03-05). The underlying weakness is classified as CWE-287.

Key facts

Description

An Improper Authentication issue was discovered in Hikvision DS-2CD2xx2F-I Series V5.2.0 build 140721 to V5.4.0 build 160530, DS-2CD2xx0F-I Series V5.2.0 build 140721 to V5.4.0 Build 160401, DS-2CD2xx2FWD Series V5.3.1 build 150410 to V5.4.4 Build 161125, DS-2CD4x2xFWD Series V5.2.0 build 140721 to V5.4.0 Build 160414, DS-2CD4xx5 Series V5.2.0 build 140721 to V5.4.0 Build 160421, DS-2DFx Series V5.2.0 build 140805 to V5.4.5 Build 160928, and DS-2CD63xx Series V5.0.9 build 140305 to V5.3.5 Build 160106 devices. The improper authentication vulnerability occurs when an application does not adequately or correctly authenticate users. This may allow a malicious user to escalate his or her privileges on the system and gain access to sensitive information.

Frequently asked questions

What is CVE-2017-7921?
An Improper Authentication issue was discovered in Hikvision DS-2CD2xx2F-I Series V5.2.0 build 140721 to V5.4.0 build 160530, DS-2CD2xx0F-I Series V5.2.0 build 140721 to V5.4.0 Build 160401, DS-2CD2xx2FWD Series V5.3.1 build 150410 to V5.4.4 Build 161125, DS-2CD4x2xFWD Series V5.2.0 build 140721 to V5.4.0 Build 160414, DS-2CD4xx5 Series V5.2.0 build 140721 to V5.4.0 Build 160421, DS-2DFx Series V5.2.0 build 140805 to V5.4.5 Build 160928, and DS-2CD63xx Series V5.0.9 build 140305 to V5.3.5 Build 160106 devices. The improper authentication vulnerability occurs when an application does not adequately or correctly authenticate users. This may allow a malicious user to escalate his or her privileges on the system and gain access to sensitive information.
How severe is CVE-2017-7921?
CVE-2017-7921 has a CVSS 3.x base score of 9.8, rated critical severity. It is exploitable over network with low attack complexity, requires no privileges and no user interaction. Impact on confidentiality is high, integrity high, and availability high.
Is CVE-2017-7921 being actively exploited?
Yes. CVE-2017-7921 is on CISA's Known Exploited Vulnerabilities (KEV) catalog, added on 2026-03-05, which means active exploitation has been confirmed. It should be prioritised for remediation.
What products are affected by CVE-2017-7921?
CVE-2017-7921 primarily affects Hikvision Ds-2cd2032-i Firmware. In total, 58 product configurations (CPEs) are listed as vulnerable; see the affected-products list for the exact versions.
How do I fix CVE-2017-7921?
Review the linked vendor and NVD advisories for patched versions and mitigations, then upgrade or apply the recommended workaround. Because this CVE is known to be actively exploited, treat remediation as urgent — CISA KEV typically sets a short remediation deadline.
Does CVE-2017-7921 have an EU (EUVD) identifier?
Yes. CVE-2017-7921 is tracked in the ENISA EU Vulnerability Database (EUVD) as EUVD-2017-16892. It is also flagged as exploited in the EUVD (since 2026-03-05).
When was CVE-2017-7921 published?
CVE-2017-7921 was published on 2017-05-06 and last updated on 2026-06-17.

References

Affected products (58)

More vulnerabilities in Hikvision Ds-2cd2032-i Firmware

All CVEs affecting Hikvision Ds-2cd2032-i Firmware →

Other CWE-287 (Improper Authentication) vulnerabilities

Browse all CWE-287 (Improper Authentication) vulnerabilities →