Skip to content

Hikvision product

Several products

Alert
No CISA KEV deadline is open. CISA last added a Several products CVE on 5 Mar.

Tracked since 4 Mar · latest article 27 Oct · RSS · API

0Open KEV deadlines

None open

0Added to KEV · 90 days

of 1 in the full CISA catalogue · all time

0High exploit odds · current

EPSS top 5%, not in KEV

1Articles · 7 days

usual rate

Exploited, by due date1

Several products CVEs in CISA KEV with their federal deadlines. None is open.

Exploited Several products CVEs
CVEProductAddedFederal deadlineArticles
In CISA KEVCVE-2017-7921Multiple Products5 MarPassed 26 Mar10

Patch cadence and exploit odds

How often CISA adds Several products CVEs, how many have a fix, and where their exploit odds sit.

Added to CISA KEV per quarter

0Q1 ’250Q2 ’250Q3 ’250Q4 ’251Q1 ’260Q2 ’260Q3 ’260Q4 ’26
Show as table
Added to CISA KEV per quarter
QuarterAdded
Q1 20250
Q2 20250
Q3 20250
Q4 20250
Q1 20261
Q2 20260
Q3 20260
Q4 20260

Fix listed

0 of 1 CVE in coverage

1 CVE has no vendor fix recorded yet.

EPSS percentile of each CVE

One dot per CVE; a red diamond marks those in CISA KEV.

top 5%CVE-2017-7921: 100th percentile, in CISA KEV050100
Show as table
FIRST EPSS percentiles across CVEs in coverage
CVEEPSS percentile
CVE-2017-7921100

Coverage10 articles · all time

The latest 10 articles naming Several products, in the shared story grammar.

Full timeline
Developinglatest 2 hours ago10 articles7 outlets

10 articles from 7 outlets since 4 Mar. Picked up again today after 33 weeks quiet.

Now4 Mar4567891025 OctFirst reportCheck Point · 4 Mar, 03:57CISA alert5 Mar, 21:21 · official
  • Wed 4 Mar, 03:57 UTC. Check Point, first report. Iranian actors exploit Hikvision and Dahua IP cameras via CVEs. Cites a CVE in CISA KEV.
  • Wed 4 Mar, 15:08 UTC. Infosecurity, its first report on the story. Iran-linked Hackers Target Hikvision Cameras via CVE-2021-33044. Cites a CVE in CISA KEV.
  • Thu 5 Mar, 21:21 UTC. CISA, its first report on the story. Hikvision CVE-2017-7921 Improper authentication enables access. Cites a CVE in CISA KEV.
  • Thu 5 Mar, 21:44 UTC. CISA. KEV Adds Hikvision CVE-2017-7921 Privilege Escalation Risk. Cites a CVE in CISA KEV.
  • Fri 6 Mar, 08:24 UTC. The Hacker News, its first report on the story. CISA flags CVE-2017-7921 CVE-2021-22681 amid Hikvision exploits. Cites a CVE in CISA KEV.
  • Fri 6 Mar, 09:57 UTC. Security Affairs, its first report on the story. CISA Adds CVEs to KEV for Apple Rockwell and Hikvision Flaws. Cites a CVE in CISA KEV.
  • Fri 6 Mar, 10:59 UTC. SOCRadar, its first report on the story. KEV adds CVE-2017-7921 and CVE-2021-22681 patch due by 26 Mar. Cites a CVE in CISA KEV.
  • Fri 6 Mar, 14:34 UTC. Dark Reading, its first report on the story. Iran weaponises cameras with CVEs to plan missile strikes. Cites a CVE in CISA KEV.
  • Sat 7 Mar, 10:55 UTC. Security Affairs. Iran-linked actors scan Hikvision and Dahua cams via VPN for CVEs. Cites a CVE in CISA KEV.
  • Tue 27 Oct, 07:30 UTC. The Hacker News. CERT-UA reports attacks on Dahua cameras in Ukraine. Cites a CVE in CISA KEV.
  • Known exploited CVE
  • No CVE
  • Larger: an outlet’s first report
  • Square: official source
  • Coverage over time
  • Quiet time, folded
Show all 10 articles as a list
  1. Wed 4 MarDay 02
    1. Iranian actors exploit Hikvision and Dahua IP cameras via CVEs03:57 · Check Point · First report · Exploited CVE · Known exploited CVE
    2. Iran-linked Hackers Target Hikvision Cameras via CVE-2021-3304415:08 · Infosecurity · Known exploited CVE
  2. Thu 5 MarDay 12
    1. Hikvision CVE-2017-7921 Improper authentication enables access21:21 · CISA · official · CISA alert · Known exploited CVE
    2. KEV Adds Hikvision CVE-2017-7921 Privilege Escalation Risk21:44 · CISA · official · Known exploited CVE
  3. Fri 6 MarDay 24
    1. CISA flags CVE-2017-7921 CVE-2021-22681 amid Hikvision exploits08:24 · The Hacker News · Known exploited CVE
    2. CISA Adds CVEs to KEV for Apple Rockwell and Hikvision Flaws09:57 · Security Affairs · Known exploited CVE
    3. Iran weaponises cameras with CVEs to plan missile strikes14:34 · Dark Reading · Known exploited CVE
  4. Sat 7 MarDay 31
    1. Iran-linked actors scan Hikvision and Dahua cams via VPN for CVEs10:55 · Security Affairs · Known exploited CVE
  5. Quiet for 33 weeks

    Tue 27 OctDay 2371
    1. CERT-UA reports attacks on Dahua cameras in Ukraine07:30 · The Hacker News · Picked up again · Known exploited CVE

All CVEs in coverage1

Exploited first, then by EPSS

In the CVE tracker
  • CVE-2017-7921Exploited

    Hikvision Multiple Products Improper Authentication Vulnerability

    Not scored99.9% EPSS · 10 articles
Updated AboutDevelopersSign in