vulnwire
8.8high

CVE-2017-7923

A Password in Configuration File issue was discovered in Hikvision DS-2CD2xx2F-I Series V5.2.0 build 140721 to V5.4.0 build 160530, DS-2CD2…

Published 9 y ago · modified 4 mo ago · JSON

CVSS
8.8
v3.0 · NVD
CISA KEV
No
not known exploited
EPSS
2.3%
percentile 83%
Public exploits
0
none known

A Password in Configuration File issue was discovered in Hikvision DS-2CD2xx2F-I Series V5.2.0 build 140721 to V5.4.0 build 160530, DS-2CD2xx0F-I Series V5.2.0 build 140721 to V5.4.0 Build 160401, DS-2CD2xx2FWD Series V5.3.1 build 150410 to V5.4.4 Build 161125, DS-2CD4x2xFWD Series V5.2.0 build 140721 to V5.4.0 Build 160414, DS-2CD4xx5 Series V5.2.0 build 140721 to V5.4.0 Build 160421, DS-2DFx Series V5.2.0 build 140805 to V5.4.5 Build 160928, and DS-2CD63xx Series V5.0.9 build 140305 to V5.3.5 Build 160106 devices. The password in configuration file vulnerability could allow a malicious user to escalate privileges or assume the identity of another user and access sensitive information.

Exploit prediction (EPSS)

2.31% probability of exploitation in the next 30 days, higher than 83% of all scored CVEs.

CVSS scores

Assigned byVersionScoreVector
NVD3.08.8CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
NVD2.04.0AV:N/AC:L/Au:S/C:P/I:N/A:N

Affected products

  • n/a Hikvision Cameras

Classification

Weakness
  • CWE-260 Password in Configuration File
  • CWE-200 Exposure of Sensitive Information to an Unauthorized Actor

References

  • ics-cert.us-cert.gov /advisories/ICSA-17-124-01 · x_refsource_MISC, x_transferred
  • securityfocus.com /bid/98313 · vdb-entry, x_refsource_BID, x_transferred
  • ghostbin.com /paste/q2vq2 · x_refsource_MISC, x_transferred
  • hikvision.com /us/about_10807.html · x_refsource_MISC, x_transferred
  • hikvision.com /us-en/support/document-center/special-notices/privilege-escalating-vulnerability-in-certa
  • hikvision.com /cn/support/CybersecurityCenter/SecurityNotices/20170314/
  • hikvision.com /en/support/cybersecurity/security-advisory/security-notification--privilege-escalating-vu

Sources

vulnwire keeps one entry per vulnerability: the CVE id wins, then GHSA; records that alias each other are merged. Machine-readable: JSON.