Hikvision Multiple Products Improper Authentication (CVE-2017-7921)

Related Vulnerabilities: CVE-2017-7921  

Check Point Reference: CPAI-2017-1803 Date Published: 20 Feb 2024 Severity: Critical Last Updated: Tuesday 20 February, 2024 Source: Industry Reference:CVE-2017-7921
Protection Provided by:

Security Gateway
R81, R80, R77, R75

Who is Vulnerable? Hikvision DS-2CD2xx2F-I Series from V5.2.0 build 140721 to V5.4.0 build 160530
Hikvision DS-2CD2xx0F-I Series fromV5.2.0 build 140721 to V5.4.0 Build 160401
Hikvision DS-2CD2xx2FWD Series from V5.3.1 build 150410 to V5.4.4 Build 161125
Hikvision DS- 2CD4x2xFWD Series from V5.2.0 build 140721 to V5.4.0 Build 160414
Hikvision DS-2CD4xx5 Series from V5.2.0 build 140721 to V5.4.0 Build 160421
Hikvision DS-2DFx Series from V5.2.0 build 140805 to V5.4.5 Build 160928
Hikvision DS-2CD63xx Series from V5.0.9 build 140305 to V5.3.5 Build 160106 Vulnerability Description An improper authentication vulnerability exists in multiple Hikvision products. Successful exploitation of this vulnerability would allow a remote attacker to obtain sensitive information.