Main
Vulnerability Database
Exploits
ID:9262 - Exploit for Privilege escalation in Hikvision products - CVE-2017-7921
ID:9262 - Exploit for Privilege escalation in Hikvision products - CVE-2017-7921
Published: August 28, 2023
Vulnerability identifier: #VU9538
Vulnerability risk: Medium
CVE-ID: CVE-2017-7921
CWE-ID: CWE-287
Exploitation vector: Remote access
Vulnerable software:
DS-2CD63xx Series
DS-2DFx Series
DS-2CD4xx5 Series
DS- 2CD4x2xFWD Series
DS-2CD2xx2FWD Series
DS-2CD2xx0F-I Series
DS-2CD2xx2F-I Series
Hikvision DVR/NVR Firmware
DS-2CD63xx Series
DS-2DFx Series
DS-2CD4xx5 Series
DS- 2CD4x2xFWD Series
DS-2CD2xx2FWD Series
DS-2CD2xx0F-I Series
DS-2CD2xx2F-I Series
Hikvision DVR/NVR Firmware
Link to public exploit:
Vulnerability description
The vulnerability allows a remote attacker to gain elevated privileges on the target system.
The weakness exists due to improper authentication when an application does not adequately or correctly authenticate users. A remote attacker can bypass authentication and gain elevated privileges.
The weakness exists due to improper authentication when an application does not adequately or correctly authenticate users. A remote attacker can bypass authentication and gain elevated privileges.
Remediation
Install update from vendor's website.