CVE-2025-66176
Summary
| CVE | CVE-2025-66176 |
|---|---|
| State | PUBLISHED |
| Assigner | hikvision |
| Source Priority | CVE Program / NVD first with legacy fallback |
| Published | 2026-01-13 03:16:01 UTC |
| Updated | 2026-07-09 07:16:21 UTC |
| Description | There is a Buffer overflow Vulnerability in the device Search and Discovery feature of Hikvision Access Control Products. If exploited, an attacker on the same local area network (LAN) could cause the device to malfunction by sending specially crafted packets to an unpatched device. |
Risk And Classification
Primary CVSS: v3.1 8.8 HIGH from [email protected]
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS: 0.004850000 probability, percentile 0.384180000 (date 2026-07-13)
Problem Types: CWE-121 | CWE-121 CWE-121 Stack-based Buffer Overflow
| Version | Source | Type | Score | Severity | Vector |
|---|---|---|---|---|---|
| 3.1 | [email protected] | Secondary | 8.8 | HIGH | CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
| 3.1 | CNA | CVSS | 8.8 | HIGH | CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
CVSS v3.1 Breakdown
Attack Vector
AdjacentAttack Complexity
LowPrivileges Required
NoneUser Interaction
NoneScope
UnchangedConfidentiality
HighIntegrity
HighAvailability
HighCVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
NVD Known Affected Configurations (CPE 2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Hardware | Hikvision | Ds-k1t105a | - | All | All | All |
| Operating System | Hikvision | Ds-k1t105a Firmware | All | All | All | All |
| Hardware | Hikvision | Ds-k1t201a | - | All | All | All |
| Operating System | Hikvision | Ds-k1t201a Firmware | All | All | All | All |
| Hardware | Hikvision | Ds-k1t320 | - | All | All | All |
| Operating System | Hikvision | Ds-k1t320 Firmware | All | All | All | All |
| Hardware | Hikvision | Ds-k1t321 | - | All | All | All |
| Operating System | Hikvision | Ds-k1t321 Firmware | All | All | All | All |
| Hardware | Hikvision | Ds-k1t323 | - | All | All | All |
| Operating System | Hikvision | Ds-k1t323 Firmware | All | All | All | All |
| Hardware | Hikvision | Ds-k1t331 | - | All | All | All |
| Operating System | Hikvision | Ds-k1t331 Firmware | All | All | All | All |
| Hardware | Hikvision | Ds-k1t341a | - | All | All | All |
| Operating System | Hikvision | Ds-k1t341a Firmware | All | All | All | All |
| Hardware | Hikvision | Ds-k1t341b | - | All | All | All |
| Operating System | Hikvision | Ds-k1t341b Firmware | All | All | All | All |
| Hardware | Hikvision | Ds-k1t341c | - | All | All | All |
| Operating System | Hikvision | Ds-k1t341c Firmware | All | All | All | All |
| Hardware | Hikvision | Ds-k1t342 | - | All | All | All |
| Operating System | Hikvision | Ds-k1t342 Firmware | All | All | All | All |
| Hardware | Hikvision | Ds-k1t343 | - | All | All | All |
| Operating System | Hikvision | Ds-k1t343 Firmware | All | All | All | All |
| Hardware | Hikvision | Ds-k1t344 | - | All | All | All |
| Operating System | Hikvision | Ds-k1t344 Firmware | All | All | All | All |
| Hardware | Hikvision | Ds-k1t510 | - | All | All | All |
| Operating System | Hikvision | Ds-k1t510 Firmware | All | All | All | All |
| Hardware | Hikvision | Ds-k1t670 | - | All | All | All |
| Operating System | Hikvision | Ds-k1t670 Firmware | All | All | All | All |
| Hardware | Hikvision | Ds-k1t671 | - | All | All | All |
| Operating System | Hikvision | Ds-k1t671 Firmware | All | All | All | All |
| Hardware | Hikvision | Ds-k1t672 | - | All | All | All |
| Operating System | Hikvision | Ds-k1t672 Firmware | All | All | All | All |
| Hardware | Hikvision | Ds-k1t673 | - | All | All | All |
| Operating System | Hikvision | Ds-k1t673 Firmware | All | All | All | All |
| Hardware | Hikvision | Ds-k1t680 | - | All | All | All |
| Operating System | Hikvision | Ds-k1t680 Firmware | All | All | All | All |
| Hardware | Hikvision | Ds-k1t6qt-f43 | - | All | All | All |
| Operating System | Hikvision | Ds-k1t6qt-f43 Firmware | All | All | All | All |
| Hardware | Hikvision | Ds-k1t6qt-f72 | - | All | All | All |
| Operating System | Hikvision | Ds-k1t6qt-f72 Firmware | All | All | All | All |
| Hardware | Hikvision | Ds-k1t8003 | - | All | All | All |
| Operating System | Hikvision | Ds-k1t8003 Firmware | All | All | All | All |
| Hardware | Hikvision | Ds-k1t8005 | - | All | All | All |
| Operating System | Hikvision | Ds-k1t8005 Firmware | All | All | All | All |
| Hardware | Hikvision | Ds-k1t804a | - | All | All | All |
| Operating System | Hikvision | Ds-k1t804a Firmware | All | All | All | All |
| Hardware | Hikvision | Ds-k1t804b | - | All | All | All |
| Operating System | Hikvision | Ds-k1t804b Firmware | All | All | All | All |
| Hardware | Hikvision | Ds-k1t808 | - | All | All | All |
| Operating System | Hikvision | Ds-k1t808 Firmware | All | All | All | All |
| Hardware | Hikvision | Ds-k1t981 | - | All | All | All |
| Operating System | Hikvision | Ds-k1t981 Firmware | All | All | All | All |
| Hardware | Hikvision | Ds-k5033 | - | All | All | All |
| Operating System | Hikvision | Ds-k5033 Firmware | All | All | All | All |
| Hardware | Hikvision | Ds-k5671 | - | All | All | All |
| Operating System | Hikvision | Ds-k5671 Firmware | All | All | All | All |
Vendor Declared Affected Products
| Source | Vendor | Product | Version | Platforms |
|---|---|---|---|---|
| CNA | Hikvision | DS-K1T331 | affected Versions below V3.7.80 | Not specified |
| CNA | Hikvision | DS-K1T341A/K1T341B | affected Versions below V3.7.80 | Not specified |
| CNA | Hikvision | DS-K1T671/K5671 | affected Versions below V3.7.80 | Not specified |
| CNA | Hikvision | DS-K1T672 | affected Versions below V3.7.80 | Not specified |
| CNA | Hikvision | DS-K1T680 | affected Versions below V3.7.80 | Not specified |
| CNA | Hikvision | DS-K1T981 | affected Versions below V3.7.80 | Not specified |
| CNA | Hikvision | DS-K1T341C | affected Versions below V3.3.180 | Not specified |
| CNA | Hikvision | DS-K1T670/K1T673 | affected Versions below V4.48.0 | Not specified |
| CNA | Hikvision | DS-K1T8003 | affected Versions below V1.4.21 | Not specified |
| CNA | Hikvision | DS-K1T804A | affected Versions below V1.4.22 | Not specified |
| CNA | Hikvision | DS-K1T8003/8004 | affected Versions below V1.4.21 | Not specified |
| CNA | Hikvision | DS-K1T804A | affected Versions below V1.4.22 | Not specified |
| CNA | Hikvision | DS-K1T804B | affected Versions below V1.4.23 | Not specified |
| CNA | Hikvision | DS-K1T201A/K1T105A | affected Versions below V1.3.65 | Not specified |
| CNA | Hikvision | DS-K1T342/K1T343/K1T344/DS-K1T6QT-F72/F43 | affected Versions below V4.48.0 | Not specified |
| CNA | Hikvision | DS-K1T8005/DS-K1T808 | affected Versions below V3.25.40 | Not specified |
| CNA | Hikvision | DS-K1T320/DS-K1T321 | affected Versions below V3.9.40 | Not specified |
| CNA | Hikvision | DS-K1T323/DS-K1T510 | affected Versions below V4.23.41 | Not specified |
| CNA | Hikvision | DS-K5033 | affected Versions below V4.37.40 | Not specified |
References
| Reference | Source | Link | Tags |
|---|---|---|---|
| www.talosintelligence.com/vulnerability_reports/TALOS-2025-2281 | af854a3a-2127-422b-91ae-364da2661108 | www.talosintelligence.com | |
| www.hikvision.com/en/support/cybersecurity/security-advisory/buffer-overflow-vu... | [email protected] | www.hikvision.com | Vendor Advisory |
| CVE Program record | CVE.ORG | www.cve.org | canonical |
| NVD vulnerability detail | NVD | nvd.nist.gov | canonical, analysis |
Vendor Comments And Credit
Discovery Credit
CNA: Matt Wiseman of Cisco Talos (en)
There are currently no legacy QID mappings associated with this CVE.