Description
An Improper Authentication issue was discovered in Hikvision DS-2CD2xx2F-I Series V5.2.0 build 140721 to V5.4.0 build 160530, DS-2CD2xx0F-I Series V5.2.0 build 140721 to V5.4.0 Build 160401, DS-2CD2xx2FWD Series V5.3.1 build 150410 to V5.4.4 Build 161125, DS-2CD4x2xFWD Series V5.2.0 build 140721 to V5.4.0 Build 160414, DS-2CD4xx5 Series V5.2.0 build 140721 to V5.4.0 Build 160421, DS-2DFx Series V5.2.0 build 140805 to V5.4.5 Build 160928, and DS-2CD63xx Series V5.0.9 build 140305 to V5.3.5 Build 160106 devices. The improper authentication vulnerability occurs when an application does not adequately or correctly authenticate users. This may allow a malicious user to escalate his or her privileges on the system and gain access to sensitive information.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| — | Hikvision Cameras | Hikvision Cameras | — |
Public exploits
Exploit or proof-of-concept code for this vulnerability is publicly available, which lowers the bar for attackers. Treat it as a reason to patch sooner.
Metasploit 2 modules
-
Unauthenticated information disclosure such as configuration, credentials and camera snapshots of a vulnerable Hikvision IP Camera
auxiliary/gather/hikvision_info_disclosure_cve_2017_7921
-
Hikvision IP Camera Unauthenticated Password Change Via Improper Authentication Logic
auxiliary/admin/http/hikvision_unauth_pwd_reset_cve_2017_7921
GitHub 28 repositories · most starred shown
-
chrisjd20/hikvision_CVE-2017-7921_auth_bypass_config_decryptor ★ 116 · Jan 29, 2021
This python file will decrypt the configurationFile used by hikvision cameras vulnerable to CVE-2017-7921.
-
JrDw0/CVE-2017-7921-EXP ★ 105 · Apr 27, 2020
Hikvision camera CVE-2017-7921-EXP
-
BurnyMcDull/CVE-2017-7921 ★ 35 · Nov 12, 2020
海康威视未授权访问检测poc及口令爆破
-
Mr-Ochobot/Hikvision-CCTV-POC ★ 31 · Nov 5, 2026
This project is a single-target proof of concept (PoC) for assessing exposure to CVE-2017-7921, an authentication-bypass vulnerability affecting certain Hikvision IP camera and NVR firmware. The scri…
-
voidsshadows/Hikvision-City-Hunter ★ 19 · Nov 19, 2025
This tool is a modern evolution of older PoCs like those for CVE-2017-7921 and ICSA-17-124-01, updated for 2025 with live console output, threading for speed, and honeypot filtering (skips devices wi…
-
MisakaMikato/cve-2017-7921-golang ★ 13 · Nov 13, 2020
Hikvision IP camera access bypass exploit, developed by golang.
-
Th3Purge/CVE-2017-7921-Exploit ★ 9 · Sep 11, 2026
Exploit for CVE-2017-7921, targeting the improper authentication vulnerability affecting Hikvision camera systems.
-
kooroshsanaei/HikVision-CVE-2017-7921 ★ 7 · Jul 2, 2024
Test For CVE-2017–7921;
-
alkaid176/CVE-2017-7921 ★ 6 · Jul 20, 2022
CVE-2017-7921-EXP Hikvision camera
-
Wyl-cmd/CVE-2017-7921-Research-Toolkit ★ 5 · Jan 28, 2026
用于借助FOFA快速测试海康威视的CVE-2017-7921漏洞，并且给出登陆账号和密码，并输出json文件。
Sources: PoC-in-GitHub, Metasploit Framework, Exploit-DB — updated daily. Only links are listed; no exploit code is hosted here.
Automated scanner template
A ready-made Nuclei template detects this vulnerability automatically. Vulnerabilities with public scanner templates are typically probed across the internet soon after the template appears — exposed systems should be patched first.
- Hikvision - Authentication Bypass http/cves/2017/CVE-2017-7921.yaml
Source: projectdiscovery/nuclei-templates (MIT) — updated daily. Only links are listed.
Advisories 1
- ICSA-17-124-01 Hikvision Cameras CISA ICS & IT advisories · May 4, 2017