Hikvision Multiple Product Vulnerability Could Let Attackers Escalate Privileges

CISA added CVE-2017-7921 — an authentication bypass in multiple Hikvision cameras and NVRs — to its Known Exploited Vulnerabilities catalog after confirming active exploitation; the flaw enables attackers to bypass login, escalate privileges, view/download video, and pivot into internal networks. Federal agencies face a binding remediation deadline, and organizations are urged to identify vulnerable devices, apply vendor fixes or isolate/disconnect affected hardware.