Back to the CVE list
CVE-2017-7921 CISA KEV · Actively exploited

Hikvision Multiple Products Improper Authentication Vulnerability

CVSS score

—

EPSS probability

%100.0

Risk score

—

Published

7 mo ago

Public Exploits · GitHub and Metasploit Intelligence

This tab scans the sources that NVD labels as exploits, GitHub repositories matching the CVE identifier and Rapid7 Metasploit Framework modules. Only links to sources that were actually found are shown.

A Python-based tool for security assessment of Hikvision devices affected by CVE-2017-7921.

Public PoCSource updated: 14.10.2026 14:52:06

Exploit for CVE-2017-7921, targeting the improper authentication vulnerability affecting Hikvision camera systems.

Public PoCSource updated: 02.10.2026 13:42:02

用于借助FOFA快速测试海康威视的CVE-2017-7921漏洞,并且给出登陆账号和密码,并输出json文件。

Public PoCSource updated: 10.08.2026 08:21:55

Vulnerability research write-up on CVE-2017-7921 — a critical unauthenticated auth bypass in Hikvision IP cameras/DVRs/NVRs, covering root cause, exploitation path, detection, and remediation.

Public PoCSource updated: 12.08.2026 18:58:11

Hikvision IP camera access bypass exploit, developed by golang.

Public PoCSource updated: 24.08.2026 14:51:45

simple CVE-2017-7921 rewrite in python by me. for educational purposes only!

Public PoCSource updated: 21.09.2026 23:03:47

HikVision Auth Bypass CVE, tool is able to extract credentials, and take snapshots based on magic cookie or supplied credentials.

Public PoCSource updated: 09.02.2026 13:18:54

CVE-2017-7921 is a critical vulnerability (CVSS score: 9.8) affecting multiple Hikvision IP camera and DVR models, first disclosed in 2017. It stems from an improper authentication flaw that allows unauthenticated remote attackers to bypass login mechanisms and gain unauthorized access to sensitive system information

Public PoCSource updated: 15.12.2025 12:29:21

Nuclei: Hikvision - Authentication Bypass

Exploit reference

Similar Vulnerabilities

Get this vulnerability through the API

Affected products, version ranges, exploitation status and patch information in a single request, with a free key.

curl -H "x-api-key: $DAYBREACH_API_KEY" \
  "https://api.daybreach.dev/api/v1/intel/cves/CVE-2017-7921"