Hikvision AcuSense Turret (DS-2CD2347G2-LU)

Security Grade

Calculator v1

   Brand: Hikvision (Parent: Hikvision Digital Technology)

   Category: Professional IP turret camera (AcuSense) • Model / Gen:  DS-2CD2347G2-LU

   Release Date: 2021-05-01 • Status: In sale

   Classification Date: 2026-10-25 • Official Website

Security Evaluation

Criterion	Value	Proof	Comment
Known hardware tampering	Very common	🔗 Proof	Serial console and reset paths on DS-series hardware are documented, and physical access yields an unrestricted shell on related DVR models.
Known vulnerabilities	Very common	[1] 🔗 Proof	CVE-2021-36260 (CVSS 9.8, command injection, 100+ DS-2CD/DS-2DF models) and the CVE-2017-7921 auth bypass backdoor are both on this product line.
Prior attacks	Very common	🔗 Proof	Thousands of automated exploitation attempts per month recorded in honeypots; both CVEs sit in CISA KEV and feed Mirai-style botnets.
Updatability	None	🔗 Proof	Patches exist but large fleets stay on EOL firmware; Hikvision itself recommends discontinuing unpatched units.
Category Score	Score: 3 / 3

Criterion	Value	Proof	Comment
Authentication with other systems	No	🔗 Proof	CVE-2017-7921: an attacker appends a base64 auth= parameter and accesses device info, user lists and snapshots with no login.
Communications	Encrypted with obselete encryption	🔗 Proof	HTTPS available but RTSP and ONVIF run plaintext by default and are internet-exposed in typical deployments.
Storage	No encryption	🔗 Proof	Configuration files, credentials and snapshots are retrievable unauthenticated, and NVR/edge storage is unencrypted.
Category Score	Score: 3 / 3

Criterion	Value	Proof	Comment
Account management	Absent	🔗 Proof	The /Security/users endpoint exposes the account list; user management cannot be trusted as a control.
Authentication	Absent	🔗 Proof	Hidden URL-parameter authentication accepting admin:11 — effectively absent authentication.
Brute-force protection	Absent	🔗 Proof	Numeric on-screen keypads with trivial PINs make brute-force trivial; no lockout observed in the exploitation data.
Event logging	Partial logging	🔗 Proof	Device logs exist but are local, easily wiped, and not forwarded by default.
Passwords	Default/Common/Easy to guess	🔗 Proof	Default and common credentials remain the primary exploitation vector; the backdoor string decodes to admin:11.
Category Score	Score: 3 / 3

Property	Details
Operating System & App	Linux (Hikvision firmware) (Companion App: Hik-Connect)
Hardware (CPU / GPU)	CPU: • GPU:
Memory & Storage	Memory: • Storage:
Power, Battery & Charging	Battery: • Power: • Charging:
Display & Camera	Display: • Camera:
Sound & Connectivity	Sound: • Connectivity: Ethernet, PoE, ONVIF, RTSP
Physical (Dimensions & Mass)	Dimensions: • Mass: