CVE-2017-7923: Infoleak

Published May 6, 2017

Updated

A Password in Configuration File issue was discovered in Hikvision DS-2CD2xx2F-I Series V5.2.0 build 140721 to V5.4.0 build 160530, DS-2CD2xx0F-I Series V5.2.0 build 140721 to V5.4.0 Build 160401, DS-2CD2xx2FWD Series V5.3.1 build 150410 to V5.4.4 Build 161125, DS-2CD4x2xFWD Series V5.2.0 build 140721 to V5.4.0 Build 160414, DS-2CD4xx5 Series V5.2.0 build 140721 to V5.4.0 Build 160421, DS-2DFx Series V5.2.0 build 140805 to V5.4.5 Build 160928, and DS-2CD63xx Series V5.0.9 build 140305 to V5.3.5 Build 160106 devices. The password in configuration file vulnerability could allow a malicious user to escalate privileges or assume the identity of another user and access sensitive information.

Affected Software

232 affected components

All of the following

Any of the following

Hikvision Ds-2cd2032-i Firmware

Hikvision Ds-2cd2112-i Firmware

Hikvision Ds-2cd2132-i Firmware

Hikvision Ds-2cd2212-i5 Firmware

Hikvision Ds-2cd2232-i5 Firmware

Hikvision Ds-2cd2312-i Firmware

Hikvision Ds-2cd2332-i Firmware

Hikvision Ds-2cd2412f-i\(w\) Firmware

Hikvision Ds-2cd2432f-i\(w\) Firmware

Hikvision Ds-2cd2512f-i\(s\) Firmware

Hikvision Ds-2cd2532f-i\(s\) Firmware

Hikvision Ds-2cd2612f-i\(s\) Firmware

Hikvision Ds-2cd2632f-i\(s\) Firmware

Hikvision Ds-2cd2712f-i\(s\) Firmware

Hikvision Ds-2cd2732f-i\(s\) Firmware

Hikvision Ds-2cd2t32-i3 Firmware

Hikvision Ds-2cd2t32-i5 Firmware

Hikvision Ds-2cd2t32-i8 Firmware

Hikvision Ds-2cd4012f-\(a\) Firmware

Hikvision Ds-2cd4012f-\(p\) Firmware

Hikvision Ds-2cd4012f-\(w\) Firmware

Hikvision Ds-2cd4012fwd-\(a\) Firmware

Hikvision Ds-2cd4012fwd-\(p\) Firmware

Hikvision Ds-2cd4012fwd-\(w\) Firmware

Hikvision Ds-2cd4024f-\(a\) Firmware

Hikvision Ds-2cd4024f-\(p\) Firmware

Hikvision Ds-2cd4024f-\(w\) Firmware

Hikvision Ds-2cd4032fwd-\(a\) Firmware

Hikvision Ds-2cd4032fwd-\(p\) Firmware

Hikvision Ds-2cd4032fwd-\(w\) Firmware

Hikvision Ds-2cd4112f-i\(z\) Firmware

Hikvision Ds-2cd4112fwd-i\(z\) Firmware

Hikvision Ds-2cd4124f-i\(z\) Firmware

Hikvision Ds-2cd4132fwd-i\(z\) Firmware

Hikvision Ds-2cd4212f-i\(h\) Firmware

Hikvision Ds-2cd4212f-i\(s\) Firmware

Hikvision Ds-2cd4212f-i\(z\) Firmware

Hikvision Ds-2cd4212fwd-i\(h\) Firmware

Hikvision Ds-2cd4212fwd-i\(s\) Firmware

Hikvision Ds-2cd4212fwd-i\(z\) Firmware

Hikvision Ds-2cd4224f-i\(h\) Firmware

Hikvision Ds-2cd4224f-i\(s\) Firmware

Hikvision Ds-2cd4224f-i\(z\) Firmware

Hikvision Ds-2cd4232fwd-i\(h\) Firmware

Hikvision Ds-2cd4232fwd-i\(s\) Firmware

Hikvision Ds-2cd4232fwd-i\(z\) Firmware

Hikvision Ds-2cd4312f-i\(h\) Firmware

Hikvision Ds-2cd4312f-i\(s\) Firmware

Hikvision Ds-2cd4312f-i\(z\) Firmware

Hikvision Ds-2cd4324f-i\(h\) Firmware

Hikvision Ds-2cd4324f-i\(s\) Firmware

Hikvision Ds-2cd4324f-i\(z\) Firmware

Hikvision Ds-2cd4332fwd-i\(h\) Firmware

Hikvision Ds-2cd4332fwd-i\(s\) Firmware

Hikvision Ds-2cd4332fwd-i\(z\) Firmware

Hikvision Ds-2cd6412fwd Firmware

Any of the following

Hikvision Ds-2cd2032-i

Hikvision Ds-2cd2112-i

Hikvision Ds-2cd2132-i

Hikvision Ds-2cd2212-i5

Hikvision Ds-2cd2232-i5

Hikvision Ds-2cd2312-i

Hikvision Ds-2cd2332-i

Hikvision Ds-2cd2412f-i\(w\)

Hikvision Ds-2cd2432f-i\(w\)

Hikvision Ds-2cd2512f-i\(s\)

Hikvision Ds-2cd2532f-i\(s\)

Hikvision Ds-2cd2612f-i\(s\)

Hikvision Ds-2cd2632f-i\(s\)

Hikvision Ds-2cd2712f-i\(s\)

Hikvision Ds-2cd2732f-i\(s\)

Hikvision Ds-2cd2t32-i3

Hikvision Ds-2cd2t32-i5

Hikvision Ds-2cd2t32-i8

Hikvision Ds-2cd4012f-\(a\)

Hikvision Ds-2cd4012f-\(p\)

Hikvision Ds-2cd4012f-\(w\)

Hikvision Ds-2cd4012fwd-\(a\)

Hikvision Ds-2cd4012fwd-\(p\)

Hikvision Ds-2cd4012fwd-\(w\)

Hikvision Ds-2cd4024f-\(a\)

Hikvision Ds-2cd4024f-\(p\)

Hikvision Ds-2cd4024f-\(w\)

Hikvision Ds-2cd4032fwd-\(a\)

Hikvision Ds-2cd4032fwd-\(p\)

Hikvision Ds-2cd4032fwd-\(w\)

Hikvision Ds-2cd4112f-i\(z\)

Hikvision Ds-2cd4112fwd-i\(z\)

Hikvision Ds-2cd4124f-i\(z\)

Hikvision Ds-2cd4132fwd-i\(z\)

Hikvision Ds-2cd4212f-i\(h\)

Hikvision Ds-2cd4212f-i\(s\)

Hikvision Ds-2cd4212f-i\(z\)

Hikvision Ds-2cd4212fwd-i\(h\)

Hikvision Ds-2cd4212fwd-i\(s\)

Hikvision Ds-2cd4212fwd-i\(z\)

Hikvision Ds-2cd4224f-i\(h\)

Hikvision Ds-2cd4224f-i\(s\)

Hikvision Ds-2cd4224f-i\(z\)

Hikvision Ds-2cd4232fwd-i\(h\)

Hikvision Ds-2cd4232fwd-i\(s\)

Hikvision Ds-2cd4232fwd-i\(z\)

Hikvision Ds-2cd4312f-i\(h\)

Hikvision Ds-2cd4312f-i\(s\)

Hikvision Ds-2cd4312f-i\(z\)

Hikvision Ds-2cd4324f-i\(h\)

Hikvision Ds-2cd4324f-i\(s\)

Hikvision Ds-2cd4324f-i\(z\)

Hikvision Ds-2cd4332fwd-i\(h\)

Hikvision Ds-2cd4332fwd-i\(s\)

Hikvision Ds-2cd4332fwd-i\(z\)

Hikvision Ds-2cd6412fwd

All of the following

Hikvision Ds-2dfx Series Firmware

Hikvision DS-2DFx Series

All of the following

Hikvision Ds-2cd63xx Series Firmware

Hikvision DS-2CD63xx Series

Hikvision Ds-2cd2032-i Firmware

Hikvision Ds-2cd2112-i Firmware

Hikvision Ds-2cd2132-i Firmware

Hikvision Ds-2cd2212-i5 Firmware

Hikvision Ds-2cd2232-i5 Firmware

Hikvision Ds-2cd2312-i Firmware

Hikvision Ds-2cd2332-i Firmware

Hikvision Ds-2cd2412f-i\(w\) Firmware

Hikvision Ds-2cd2432f-i\(w\) Firmware

Hikvision Ds-2cd2512f-i\(s\) Firmware

Hikvision Ds-2cd2532f-i\(s\) Firmware

Hikvision Ds-2cd2612f-i\(s\) Firmware

Hikvision Ds-2cd2632f-i\(s\) Firmware

Hikvision Ds-2cd2712f-i\(s\) Firmware

Hikvision Ds-2cd2732f-i\(s\) Firmware

Hikvision Ds-2cd2t32-i3 Firmware

Hikvision Ds-2cd2t32-i5 Firmware

Hikvision Ds-2cd2t32-i8 Firmware

Hikvision Ds-2cd4012f-\(a\) Firmware

Hikvision Ds-2cd4012f-\(p\) Firmware

Hikvision Ds-2cd4012f-\(w\) Firmware

Hikvision Ds-2cd4012fwd-\(a\) Firmware

Hikvision Ds-2cd4012fwd-\(p\) Firmware

Hikvision Ds-2cd4012fwd-\(w\) Firmware

Hikvision Ds-2cd4024f-\(a\) Firmware

Hikvision Ds-2cd4024f-\(p\) Firmware

Hikvision Ds-2cd4024f-\(w\) Firmware

Hikvision Ds-2cd4032fwd-\(a\) Firmware

Hikvision Ds-2cd4032fwd-\(p\) Firmware

Hikvision Ds-2cd4032fwd-\(w\) Firmware

Hikvision Ds-2cd4112f-i\(z\) Firmware

Hikvision Ds-2cd4112fwd-i\(z\) Firmware

Hikvision Ds-2cd4124f-i\(z\) Firmware

Hikvision Ds-2cd4132fwd-i\(z\) Firmware

Hikvision Ds-2cd4212f-i\(h\) Firmware

Hikvision Ds-2cd4212f-i\(s\) Firmware

Hikvision Ds-2cd4212f-i\(z\) Firmware

Hikvision Ds-2cd4212fwd-i\(h\) Firmware

Hikvision Ds-2cd4212fwd-i\(s\) Firmware

Hikvision Ds-2cd4212fwd-i\(z\) Firmware

Hikvision Ds-2cd4224f-i\(h\) Firmware

Hikvision Ds-2cd4224f-i\(s\) Firmware

Hikvision Ds-2cd4224f-i\(z\) Firmware

Hikvision Ds-2cd4232fwd-i\(h\) Firmware

Hikvision Ds-2cd4232fwd-i\(s\) Firmware

Hikvision Ds-2cd4232fwd-i\(z\) Firmware

Hikvision Ds-2cd4312f-i\(h\) Firmware

Hikvision Ds-2cd4312f-i\(s\) Firmware

Hikvision Ds-2cd4312f-i\(z\) Firmware

Hikvision Ds-2cd4324f-i\(h\) Firmware

Hikvision Ds-2cd4324f-i\(s\) Firmware

Hikvision Ds-2cd4324f-i\(z\) Firmware

Hikvision Ds-2cd4332fwd-i\(h\) Firmware

Hikvision Ds-2cd4332fwd-i\(s\) Firmware

Hikvision Ds-2cd4332fwd-i\(z\) Firmware

Hikvision Ds-2cd6412fwd Firmware

Hikvision Ds-2cd2032-i

Hikvision Ds-2cd2112-i

Hikvision Ds-2cd2132-i

Hikvision Ds-2cd2212-i5

Hikvision Ds-2cd2232-i5

Hikvision Ds-2cd2312-i

Hikvision Ds-2cd2332-i

Hikvision Ds-2cd2412f-i\(w\)

Hikvision Ds-2cd2432f-i\(w\)

Hikvision Ds-2cd2512f-i\(s\)

Hikvision Ds-2cd2532f-i\(s\)

Hikvision Ds-2cd2612f-i\(s\)

Hikvision Ds-2cd2632f-i\(s\)

Hikvision Ds-2cd2712f-i\(s\)

Hikvision Ds-2cd2732f-i\(s\)

Hikvision Ds-2cd2t32-i3

Hikvision Ds-2cd2t32-i5

Hikvision Ds-2cd2t32-i8

Hikvision Ds-2cd4012f-\(a\)

Hikvision Ds-2cd4012f-\(p\)

Hikvision Ds-2cd4012f-\(w\)

Hikvision Ds-2cd4012fwd-\(a\)

Hikvision Ds-2cd4012fwd-\(p\)

Hikvision Ds-2cd4012fwd-\(w\)

Hikvision Ds-2cd4024f-\(a\)

Hikvision Ds-2cd4024f-\(p\)

Hikvision Ds-2cd4024f-\(w\)

Hikvision Ds-2cd4032fwd-\(a\)

Hikvision Ds-2cd4032fwd-\(p\)

Hikvision Ds-2cd4032fwd-\(w\)

Hikvision Ds-2cd4112f-i\(z\)

Hikvision Ds-2cd4112fwd-i\(z\)

Hikvision Ds-2cd4124f-i\(z\)

Hikvision Ds-2cd4132fwd-i\(z\)

Hikvision Ds-2cd4212f-i\(h\)

Hikvision Ds-2cd4212f-i\(s\)

Hikvision Ds-2cd4212f-i\(z\)

Hikvision Ds-2cd4212fwd-i\(h\)

Hikvision Ds-2cd4212fwd-i\(s\)

Hikvision Ds-2cd4212fwd-i\(z\)

Hikvision Ds-2cd4224f-i\(h\)

Hikvision Ds-2cd4224f-i\(s\)

Hikvision Ds-2cd4224f-i\(z\)

Hikvision Ds-2cd4232fwd-i\(h\)

Hikvision Ds-2cd4232fwd-i\(s\)

Hikvision Ds-2cd4232fwd-i\(z\)

Hikvision Ds-2cd4312f-i\(h\)

Hikvision Ds-2cd4312f-i\(s\)

Hikvision Ds-2cd4312f-i\(z\)

Hikvision Ds-2cd4324f-i\(h\)

Hikvision Ds-2cd4324f-i\(s\)

Hikvision Ds-2cd4324f-i\(z\)

Hikvision Ds-2cd4332fwd-i\(h\)

Hikvision Ds-2cd4332fwd-i\(s\)

Hikvision Ds-2cd4332fwd-i\(z\)

Hikvision Ds-2cd6412fwd

Hikvision Ds-2dfx Series Firmware

Hikvision DS-2DFx Series

Hikvision Ds-2cd63xx Series Firmware

Hikvision DS-2CD63xx Series

Remediation

Patch Available

http://www.hikvision.com/us/about_10807.html

Event History

May 6, 2017

CVE Published

via MITRE·12:00 AM

Data Sourced

via MITRE·12:00 AM

DescriptionWeakness

Frequently Asked Questions

What is the severity of CVE-2017-7923?

The severity of CVE-2017-7923 is considered high due to its potential impact on password security in the affected Hikvision devices.

How do I fix CVE-2017-7923?

To fix CVE-2017-7923, update the firmware of the affected Hikvision devices to the latest version provided by the vendor.

Which devices are affected by CVE-2017-7923?

CVE-2017-7923 affects various Hikvision DS-2CD2000 and DS-2CD4000 series camera models running firmware versions between V5.2.0 and V5.4.4.

What type of vulnerability is CVE-2017-7923?

CVE-2017-7923 is classified as a Password in Configuration File vulnerability, which can lead to unauthorized access.

Can CVE-2017-7923 be exploited remotely?

Yes, the vulnerability identified in CVE-2017-7923 can potentially be exploited remotely if proper security controls are not in place.

CVE-2017-7923: Infoleak

Affected Software

Remediation

Patch Available

Event History

Don't miss critical vulnerabilities

Frequently Asked Questions

What is the severity of CVE-2017-7923?

How do I fix CVE-2017-7923?

Which devices are affected by CVE-2017-7923?

What type of vulnerability is CVE-2017-7923?

Can CVE-2017-7923 be exploited remotely?

Company

Resources

Contact