EXPLOIT/ALERT Back to feed

Hikvision Multiple Products Improper Authentication Vulnerability

Multiple Hikvision products contain an improper authentication vulnerability that could allow a malicious user to escalate privileges on the system and gain access to sensitive information.

Published 24 Aug 2026Updated 24 Aug 2026904 sources
CVSS 9.8 PoC CANDIDATE△ CISA KEV
Overview Sources History

What happened

Multiple Hikvision products contain an improper authentication vulnerability that could allow a malicious user to escalate privileges on the system and gain access to sensitive information.

Affected versions

Multiple Products: See original advisory Fixed: See vendor advisory.

Why it matters

This source correlation may provide earlier visibility while structured CVE metadata is still being updated.

Detection & mitigation

  • Review the original advisory and validate affected versions.
  • Apply vendor-provided updates or mitigations when available.

Public PoC references

RepositoryAuthorFirst seenReference
SploitusMulti-threaded security scanner and crawler for network reconnaissance and vulnerability detection.KitPloit2026-08-24T08:32:47Candidatekitploit.comMulti-threaded security scanner and crawler for network reconnaissance and vulnerability detection.hi2026-08-24T08:32:47CandidatePoC-in-GitHub · JrDw0/CVE-2017-7921-EXPHikvision camera CVE-2017-7921-EXP★ 102JrDw02020-04-27CandidatePoC-in-GitHub · BurnyMcDull/CVE-2017-7921海康威视未授权访问检测poc及口令爆破★ 35BurnyMcDull2020-11-12CandidatePoC-in-GitHub · MisakaMikato/cve-2017-7921-golangHikvision IP camera access bypass exploit, developed by golang.★ 13MisakaMikato2020-11-13CandidatePoC-in-GitHub · chrisjd20/hikvision_CVE-2017-7921_auth_bypass_config_decryptorThis python file will decrypt the configurationFile used by hikvision cameras vulnerable to CVE-2017-7921.★ 117chrisjd202021-01-29CandidatePoC-in-GitHub · p4tq/hikvision_CVE-2017-7921_auth_bypass_config_decryptor★ 0p4tq2022-06-15CandidatePoC-in-GitHub · alkaid176/CVE-2017-7921CVE-2017-7921-EXP Hikvision camera★ 6alkaid1762022-07-20CandidatePoC-in-GitHub · inj3ction/CVE-2017-7921-EXP★ 0inj3ction2022-10-19CandidatePoC-in-GitHub · krypton612/hikivisionCVE-2017-7921 EXPLOIT★ 2krypton6122023-07-04CandidatePoC-in-GitHub · K3ysTr0K3R/CVE-2017-7921-EXPLOITA PoC exploit for CVE-2017-7921 - Hikvision Camera Series Improper Authentication Vulnerability.★ 52K3ysTr0K3R2023-07-24CandidatePoC-in-GitHub · blacksheepstudio/CVE-2017-7921-EXPHikvision camera CVE-2017-7921-EXP★ 0blacksheepstudio2023-08-01CandidatePoC-in-GitHub · AnonkiGroup/AnonHikPython script get image from Hikvision camera with CVE-2017-7921 vulnerability★ 0AnonkiGroup2023-10-23CandidatePoC-in-GitHub · b3pwn3d/CVE-2017-7921★ 0b3pwn3d2023-11-20CandidatePoC-in-GitHub · kooroshsanaei/HikVision-CVE-2017-7921Test For CVE-2017–7921;★ 6kooroshsanaei2024-07-02CandidatePoC-in-GitHub · aengussong/hikvision_probeIdentify hikvision ip and probe for cve-s (CVE-2017-7921, CVE-2022-28171, CVE-2021-36260)★ 3aengussong2024-11-26CandidatePoC-in-GitHub · GabrielAvls/CVE-2017-7921CVE-2017-7921 exploit. Allows admin password retrieval and automatic snapshot download.★ 0GabrielAvls2025-01-24CandidatePoC-in-GitHub · lastvocher/Hikvision-CVE-2017-7921-decryptor★ 0lastvocher2025-10-08CandidatePoC-in-GitHub · voidsshadows/Hikvision-City-HunterThis tool is a modern evolution of older PoCs like those for CVE-2017-7921 and ICSA-17-124-01, updated for 2025 with live console output, threading for speed, and honeypot filtering (skips devices with >12 open ports). It's built for red teamers, bug bounty hunters, and security researchers to identify★ 19voidsshadows2025-11-19CandidatePoC-in-GitHub · 0xf3d0rq/CVE-2017-7921CVE-2017-7921 is a critical vulnerability (CVSS score: 9.8) affecting multiple Hikvision IP camera and DVR models, first disclosed in 2017. It stems from an improper authentication flaw that allows unauthenticated remote attackers to bypass login mechanisms and gain unauthorized access to sensitive system information★ 10xf3d0rq2025-11-27CandidatePoC-in-GitHub · saaydmr/hikvision-exploiterCVE-2017-7921, CVE-2021-36260 updated 21/01/2026★ 1saaydmr2026-01-21CandidatePoC-in-GitHub · Wyl-cmd/CVE-2017-7921-Research-Toolkit用于借助FOFA快速测试海康威视的CVE-2017-7921漏洞，并且给出登陆账号和密码，并输出json文件。★ 5Wyl-cmd2026-01-28CandidatePoC-in-GitHub · mverschu/CVE-2017-7921HikVision Auth Bypass CVE, tool is able to extract credentials, and take snapshots based on magic cookie or supplied credentials.★ 0mverschu2026-02-09CandidatePoC-in-GitHub · KelvinWin10/CVE-2017-7921-rewritesimple CVE-2017-7921 rewrite in python by me. for educational purposes only!★ 1KelvinWin102026-02-15CandidatePoC-in-GitHub · MK-ULTRA-project-monarch/CVE-2017-7921-Writeup-2026Vulnerability research write-up on CVE-2017-7921 — a critical unauthenticated auth bypass in Hikvision IP cameras/DVRs/NVRs, covering root cause, exploitation path, detection, and remediation.★ 1MK-ULTRA-project-monarch2026-07-14CandidatePoC-in-GitHub · xjghnxhlh/hikihackHikvision CVE-2017-7921 hack★ 0xjghnxhlh2026-08-02Candidate
CorrectionsReport an issue