CVE-2017-7921: Improper Auth in Hikvision, CVSS 9.8

CVE-2017-7921 describes improper authentication in Hikvision cameras and recording systems of the DS-2CD series and variants (DS-2DFx, DS-2CD63xx and others). The vulnerability allows access to sensitive data without proper credentials, with critical impact: an attacker could access video streams, configurations, recordings, and metadata without authentication. CVSS 9.8 reflects maximum risk for widely deployed physical security devices.

Affected versions range from V5.2.0 build 140721 to V5.4.x: a time window covering years of deployments. Vulnerability status is public: a proof-of-concept has been noted on GitHub repository with today's date (2026-11-04), indicating active interest in the flaw. It is not known from provided data whether Hikvision released official patches for all affected series; the absence of information on fixes makes the vulnerability potentially still exploitable on unpatched systems.

For defenders: immediately verify firmware version of every Hikvision camera and NVR in asset inventory. Check access logs of these devices to detect unauthorized access or altered configurations. If patches are available from Hikvision, apply them with priority. If updates are not possible, implement strict network segmentation (VLAN, firewall) isolating NVRs and cameras from the rest of infrastructure; disable unnecessary remote access; monitor network traffic to these devices.