Vulnerability intelligence
CVE-2017-7921
Hikvision Multiple Products Improper Authentication Vulnerability
Hikvision Multiple Products
Multiple Hikvision products contain an improper authentication vulnerability that could allow a malicious user to escalate privileges on the system and gain access to sensitive information.
CVSS Score
—
Unrated
EPSS — Exploit Probability
100%
Riskier than 100% of all CVEs · checked 2026-09-04
Exploitation
Confirmed in the wild
KEV since 2026-03-05
Remediation
Unconfirmed
Federal deadline 2026-03-26
CISA required action
Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable. Deadline for federal agencies: 2026-03-26.
9 articles across 8 outlets · first covered Mar 4, 2026 · latest Mar 7, 2026
Coverage timeline
-
Iran-linked actors scan Hikvision and Dahua cams via VPN for CVEssecurityaffairs.com · Mar 7, 2026
-
Iran weaponises cameras with CVEs to plan missile strikeswww.darkreading.com · Mar 6, 2026
-
KEV adds CVE-2017-7921 and CVE-2021-22681 patch due by 26 Marsocradar.io · Mar 6, 2026
-
CISA Adds CVEs to KEV for Apple Rockwell and Hikvision Flawssecurityaffairs.com · Mar 6, 2026
-
CISA flags CVE-2017-7921 CVE-2021-22681 amid Hikvision exploitsthehackernews.com · Mar 6, 2026
-
KEV Adds Hikvision CVE-2017-7921 Privilege Escalation Riskwww.cisa.gov · Mar 5, 2026
-
Hikvision CVE-2017-7921 Improper authentication enables accesscisa.gov · Mar 5, 2026
-
Iran-linked Hackers Target Hikvision Cameras via CVE-2021-33044www.infosecurity-magazine.com · Mar 4, 2026
-
Iranian actors exploit Hikvision and Dahua IP cameras via CVEsresearch.checkpoint.com · Mar 4, 2026