Skip to content
Authentication Bypass Vulnerability in Hikvision Cameras Exploited

Authentication Bypass Vulnerability in Hikvision Cameras Exploited

First seen 6 Nov 2026, 14:16 UTC • •
API

Article Content

Browse articles
ThreatCluster AI
ThreatCluster •November 6, 2026 at 14:18 UTC
  • •CVE-2017-7921 is a critical authentication-bypass vulnerability with CVSS 9.8.
  • •A PoC exploit was released on November 5, 2026, allowing unauthorized access to Hikvision devices.
  • •CISA added the vulnerability to its KEV list on March 5, 2026, indicating active exploitation.

A proof of concept (PoC) exploit for CVE-2017-7921, an authentication-bypass vulnerability in Hikvision DS-2CD2032-I firmware, was released on November 5, 2026. This flaw affects certain Hikvision IP cameras and NVRs, allowing unauthorized access to device configuration files and administrator records. The exploit can retrieve JPEG snapshots and decrypt configuration data, posing a significant risk to users with vulnerable devices. The vulnerability has a CVSS score of 9.8 and was added to the CISA KEV list for on March 5, 2026. Users are advised to conduct security assessments on their devices and apply necessary mitigations. The exploit is intended for authorized security testing only, emphasizing the need for explicit permission before use.

Start a free Starter trial for enhanced analysis

Ask AI about this cluster

Updated 2h ago How this analysis works

Timeline

2017-05-06
CVE-2017-7921 published
Hikvision's authentication-bypass vulnerability was officially published, affecting specific firmware versions.
Sploitus
2026-03-05
CVE added to CISA KEV list
CISA added CVE-2017-7921 to its Known Exploited Vulnerabilities catalog due to confirmed active exploitation.
Sploitus
2026-11-05
PoC exploit released
A proof of concept exploit for CVE-2017-7921 was publicly released, allowing security testing of affected devices.
Sploitus

More articles in this cluster (3)

Following this threat?

Track CVE-2017-7921 in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.

Free account · no card needed

Extracted Entities (10)

1 / 3

Common questions

Which Hikvision devices are affected?
The vulnerability affects specific models of Hikvision IP cameras and NVRs, particularly those running vulnerable firmware.
What should I do if I have an affected device?
Conduct a security assessment and ensure you have explicit permission before testing with the PoC exploit.
Is there a patch available for this vulnerability?
The articles do not mention a specific patch; users should check Hikvision's official channels for updates.