The vulnerability of Hikvision’s IP cameras’ microprogramming software, related to authentication procedures that lack sufficient safeguards, allows intruders to exploit their privileges.

🗓️ 15 Mar 2021 00:00:00Reported by FSTEC of Russia — Information Security Threat DatabaseType

bdu_fstec

bdu_fstec🔗 bdu.fstec.ru👁 5 Views

Hikvision cameras have authentication weaknesses in microprogramming software enabling remote privilege escalation.

Reporter	Title	Published	Views	Family All 35
GithubExploit	Exploit for Improper Authentication in Hikvision Ds-2Cd2032-I_Firmware	21 Jan 202616:04	–	githubexploit
GithubExploit	Exploit for Improper Authentication in Hikvision Ds-2Cd2032-I_Firmware	12 Nov 202009:02	–	githubexploit
GithubExploit	Exploit for Improper Authentication in Hikvision Ds-2Cd2032-I_Firmware	24 Jul 202314:48	–	githubexploit
GithubExploit	Exploit for Improper Authentication in Hikvision Ds-2Cd2032-I_Firmware	2 Feb 202403:27	–	githubexploit
GithubExploit	Exploit for Improper Authentication in Hikvision Ds-2Cd2032-I_Firmware	13 Nov 202004:15	–	githubexploit
GithubExploit	Exploit for Improper Authentication in Hikvision Ds-2Cd2032-I_Firmware	2 Jul 202411:47	–	githubexploit
GithubExploit	Exploit for Improper Authentication in Hikvision Ds-2Cd2032-I_Firmware	27 Apr 202011:49	–	githubexploit
ATTACKERKB	CVE-2017-7921	6 May 201700:00	–	attackerkb
Circl	CVE-2017-7921	21 Sep 202106:42	–	circl
CISA KEV Catalog	Hikvision Multiple Products Improper Authentication Vulnerability	5 Mar 202600:00	–	cisa_kev

Source	Link
hikvision	www.hikvision.com/us/about_10805.html
securityfocus	www.securityfocus.com/bid/98313
ghostbin	www.ghostbin.com/paste/q2vq2
ics-cert	www.ics-cert.us-cert.gov/advisories/ICSA-17-124-01
exploit-db	www.exploit-db.com/exploits/50827
github	www.github.com/bp2008/HikPasswordHelper/
cisa	www.cisa.gov/known-exploited-vulnerabilities-catalog
cisa	www.cisa.gov/sites/default/files/csv/known_exploited_vulnerabilities.csv
web	www.web.nvd.nist.gov/view/vuln/detail
us-cert	www.us-cert.cisa.gov/ics/advisories/ICSA-17-124-01

06 May 2026 00:00Current

7.8High risk

Vulners AI Score7.8

CVSS 210

CVSS 310

EPSS0.99998

Hikvision cameras authentication weaknesses microprogramming software remote privilege escalation