CVE-2017-7923

CVE-2017-7923 is a Password in Configuration File vulnerability affecting various Hikvision DS-2CD and DS-2DF series devices across specific firmware versions. This flaw allows an authenticated attacker to extract sensitive password information from configuration files, potentially leading to privilege escalation or unauthorized access to sensitive data. With a CVSS v3 score of 8.8 (High), it represents a significant risk due to its network-based attack vector, low attack complexity, and high impact on confidentiality, integrity, and availability. While no public exploits or active exploitation have been identified, and community discussion is minimal, the vulnerability's high FAUCET Risk Score of 70/100 indicates its potential severity.