# CVE-2017-7921: Hikvision IP Cameras improper authentication

Source: https://junglewise.ai/threats/cve-2017-7921-hikvision-ip-cameras-improper-authentication  
Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats  
Published: 2026-03-05. Updated: 2026-05-15  
License: CC BY 4.0 with a link back

CVE-2017-7921 · Severity: critical · CVSS 9.8 · Exploited in the wild · Published 2026-03-05

Multiple Hikvision IP cameras and surveillance products contain a critical security flaw that allows unauthorized users to bypass authentication. This vulnerability enables an attacker to gain full administrative control over the camera system, potentially allowing them to view private video feeds, modify settings, or disable security monitoring. This issue has been actively exploited in the wild, posing a significant risk to physical security and data privacy.

Technologies: [Apple Multiple Products](https://junglewise.ai/threats/technologies/multiple-products). Vendors: [Apple](https://junglewise.ai/threats/vendors/apple), [Hikvision](https://junglewise.ai/threats/vendors/hikvision).

## Quick answers

**Is CVE-2017-7921 exploited in the wild?** Yes. CVE-2017-7921 is known to be exploited in the wild, first recorded on 5 March 2026. Treat it as urgent.

**How severe is CVE-2017-7921?** Critical severity, with a CVSS score of 9.8, published 5 March 2026.

**Which products and versions are affected?** Hikvision DS-2CD2xx0F-I Series V5.2.0 build 140721 to V5.4.0 Build 160401; Hikvision DS-2CD2xx2F-I Series V5.2.0 build 140721 to V5.4.0 build 160530; Hikvision DS-2CD2xx2FWD Series V5.3.1 build 150410 to V5.4.4 Build 161125; Hikvision DS-2CD4x2xFWD Series V5.2.0 build 140721 to V5.4.0 Build 160414; and 3 more.

**Is there a fix for CVE-2017-7921?** No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.

**How is CVE-2017-7921 attacked?** It is attacked over the network, in a network appliance.

**Am I affected by CVE-2017-7921?** Check whether you run Apple Multiple Products, Hikvision DS-2CD2xx0F-I Series, Hikvision DS-2CD2xx2F-I Series or one of the others listed at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

## Technical details

An improper authentication vulnerability (CWE-287) exists in several Hikvision IP camera firmware versions. The flaw occurs because the application fails to adequately validate user identity, allowing a remote, unauthenticated attacker to bypass security checks via the network. By exploiting this, an attacker can escalate their privileges to an administrative level, granting full access to the device's configuration and data. This vulnerability is listed in the CISA Known Exploited Vulnerabilities (KEV) catalog, confirming active real-world exploitation. Users should apply firmware updates provided by the vendor to mitigate this risk.

## Affected products

- Hikvision DS-2CD2xx2F-I Series V5.2.0 build 140721 to V5.4.0 build 160530
- Hikvision DS-2CD2xx0F-I Series V5.2.0 build 140721 to V5.4.0 Build 160401
- Hikvision DS-2CD2xx2FWD Series V5.3.1 build 150410 to V5.4.4 Build 161125
- Hikvision DS-2CD4x2xFWD Series V5.2.0 build 140721 to V5.4.0 Build 160414
- Hikvision DS-2CD4xx5 Series V5.2.0 build 140721 to V5.4.0 Build 160421
- Hikvision DS-2DFx Series V5.2.0 build 140805 to V5.4.5 Build 160928
- Hikvision DS-2CD63xx Series V5.0.9 build 140305 to V5.3.5 Build 160106

## Timeline

- 2017-03-14: disclosed: Initial vendor notification/advisory date
- 2026-03-05: kev added: Added to CISA Known Exploited Vulnerabilities catalog

## Related threats

- [Apple iOS, iPadOS, macOS, Safari, tvOS, watchOS pointer authentication bypass](https://junglewise.ai/threats/cve-2024-27834-apple-multiple-products-improper-authentication-vulnerability)
- [Apple CoreGraphics out-of-bounds write in file processing](https://junglewise.ai/threats/cve-2026-86950-an-out-of-bounds-write-issue-was-addressed-with-improved-bounds)
- [Apple Multiple Products integer overflow in WebKit content processing](https://junglewise.ai/threats/cve-2021-30952-apple-multiple-products-integer-overflow-in-webkit-content)
- [Rockwell Automation Logix Designer authentication bypass in Logix Controllers](https://junglewise.ai/threats/cve-2021-22681-rockwell-automation-logix-designer-authentication-bypass-in-logix)
- [Apple Multiple Operating Systems Buffer Overflow](https://junglewise.ai/threats/cve-2026-20700-apple-multiple-operating-systems-buffer-overflow)