CVE-2025-66177
Summary
| CVE | CVE-2025-66177 |
|---|---|
| State | PUBLISHED |
| Assigner | hikvision |
| Source Priority | CVE Program / NVD first with legacy fallback |
| Published | 2026-01-13 03:16:01 UTC |
| Updated | 2026-07-09 07:16:22 UTC |
| Description | There is a Buffer overflow Vulnerability in the device Search and Discovery feature of Hikvision NVR/DVR/CVR/IPC models. If exploited, an attacker on the same local area network (LAN) could cause the device to malfunction by sending specially crafted packets to an unpatched device. |
Risk And Classification
Primary CVSS: v3.1 8.8 HIGH from [email protected]
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS: 0.003230000 probability, percentile 0.242630000 (date 2026-07-13)
Problem Types: CWE-121 | CWE-121 CWE-121 Stack-based Buffer Overflow
| Version | Source | Type | Score | Severity | Vector |
|---|---|---|---|---|---|
| 3.1 | [email protected] | Secondary | 8.8 | HIGH | CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
| 3.1 | CNA | CVSS | 8.8 | HIGH | CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
CVSS v3.1 Breakdown
Attack Vector
AdjacentAttack Complexity
LowPrivileges Required
NoneUser Interaction
NoneScope
UnchangedConfidentiality
HighIntegrity
HighAvailability
HighCVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Vendor Declared Affected Products
| Source | Vendor | Product | Version | Platforms |
|---|---|---|---|---|
| CNA | Hikvision | DS-96xxxNI-Hx | affected Build date before 250807 | Not specified |
| CNA | Hikvision | DS-96xxxNI-Ix | affected Build date before 250807 | Not specified |
| CNA | Hikvision | DS-96xxNXI-Sx | affected Build date before 250807 | Not specified |
| CNA | Hikvision | DS-96xxxNXI-Sx | affected Build date before 250807 | Not specified |
| CNA | Hikvision | DS-76xxNXI-Mx/VPro | affected Build date before 250807 | Not specified |
| CNA | Hikvision | DS-96xxNXI-Mx/VPro | affected Build date before 250807 | Not specified |
| CNA | Hikvision | DS-76xxNI-Mx | affected Build date before 250807 | Not specified |
| CNA | Hikvision | DS-77xxNI-Mx | affected Build date before 250807 | Not specified |
| CNA | Hikvision | DS-96xxNXI-Mx | affected Build date before 250807 | Not specified |
| CNA | Hikvision | DS-96xxxNXI-Mx | affected Build date before 250807 | Not specified |
| CNA | Hikvision | DS-86xxxNXI-Mx | affected Build date before 250807 | Not specified |
| CNA | Hikvision | DS-76xxNXI-Ix/S | affected Build date before 250807 | Not specified |
| CNA | Hikvision | DS-77xxNXI-Ix/S | affected Build date before 250807 | Not specified |
| CNA | Hikvision | DS-86xxNXI-Ix/S | affected Build date before 250807 | Not specified |
| CNA | Hikvision | DS-96xxNXI-Ix/S | affected Build date before 250807 | Not specified |
| CNA | Hikvision | DS-76xxNXI-Ix/VPro | affected Build date before 250807 | Not specified |
| CNA | Hikvision | DS-77xxNXI-Ix/VPro | affected Build date before 250807 | Not specified |
| CNA | Hikvision | DS-76xxNXI-Kx/xP IncludingDEB | affected Build date before 250807 | Not specified |
| CNA | Hikvision | DS-77xxNXI-Kx/xP IncludingDEB | affected Build date before 250807 | Not specified |
| CNA | Hikvision | DS-76xxNXI-Kx/xP/Vpro | affected Build date before 250807 | Not specified |
| CNA | Hikvision | DS-77xxNXI-Kx/xP/Vpro | affected Build date before 250807 | Not specified |
| CNA | Hikvision | DS-76xxNI-Qx/xP IncludingDE | affected Build date before 250807 | Not specified |
| CNA | Hikvision | DS-71xxNI-Q1/xP/M | affected Build date before 250807 | Not specified |
| CNA | Hikvision | DS-71xxNI-Q1/xP | affected Build date before 250807 | Not specified |
| CNA | Hikvision | DS-710xNI-G1/xP/M | affected Build date before 250807 | Not specified |
| CNA | Hikvision | DS-71xxNI-Q1/xP | affected Build date before 250807 | Not specified |
| CNA | Hikvision | DS-71xxNI-Q1/xP/M | affected Build date before 250807 | Not specified |
| CNA | Hikvision | DS-76xxNI-Q1/xP | affected Build date before 250807 | Not specified |
| CNA | Hikvision | DS-76xxNI-Q2/xP | affected Build date before 250807 | Not specified |
| CNA | Hikvision | DS-76xxNXI-K1/xP | affected Build date before 250807 | Not specified |
| CNA | Hikvision | DS-76xxNXI-K2/xP | affected Build date before 250807 | Not specified |
| CNA | Hikvision | DS-77xxNXI-K4/xP | affected Build date before 250807 | Not specified |
| CNA | Hikvision | DS-86xxNXI-K8/xP | affected Build date before 250807 | Not specified |
| CNA | Hikvision | DS-76xxNXI-K1/xP/VPro | affected Build date before 250807 | Not specified |
| CNA | Hikvision | DS-76xxNXI-K2/xP/VPro | affected Build date before 250807 | Not specified |
| CNA | Hikvision | DS-77xxNXI-K4/xP/VPro | affected Build date before 250807 | Not specified |
| CNA | Hikvision | IDS-71xxHGHI-M1/T | affected Build date before 250807 | Not specified |
| CNA | Hikvision | IDS-72xxHGHI-M1/T | affected Build date before 250807 | Not specified |
| CNA | Hikvision | IDS-71xxHQHI-M1/T | affected Build date before 250807 | Not specified |
| CNA | Hikvision | IDS-72xxHQHI-M1/T | affected Build date before 250807 | Not specified |
| CNA | Hikvision | IDS-72xxHQHI-Mx/XT | affected Build date before 250807 | Not specified |
| CNA | Hikvision | IDS-72xxHUHI-Mx/XT | affected Build date before 250807 | Not specified |
| CNA | Hikvision | IDS-72xxHTHI-Mx/XT | affected Build date before 250807 | Not specified |
| CNA | Hikvision | IDS-90xxHUHI-M8/SS | affected Build date before 250807 | Not specified |
| CNA | Hikvision | IDS-73xxHUHI-M4/SS | affected Build date before 250807 | Not specified |
| CNA | Hikvision | IDS-81xxHUHI-M8/SS | affected Build date before 250807 | Not specified |
| CNA | Hikvision | DS-71xxHGHI-M1/T | affected Build date before 250807 | Not specified |
| CNA | Hikvision | DS-72xxHGHI-M1/T | affected Build date before 250807 | Not specified |
| CNA | Hikvision | DS-ExxHGHI-xx | affected Build date before 250807 | Not specified |
| CNA | Hikvision | IDS-71xxHQHI-M1/S | affected Build date before 250807 | Not specified |
| CNA | Hikvision | IDS-72xxHQHI-M1/E | affected Build date before 250807 | Not specified |
| CNA | Hikvision | IDS-71xxHQHI-M1/T | affected Build date before 250807 | Not specified |
| CNA | Hikvision | IDS-72xxHQHI-M1/T | affected Build date before 250807 | Not specified |
| CNA | Hikvision | IDS-72xxHQHI-Mx/XT | affected Build date before 250807 | Not specified |
| CNA | Hikvision | IDS-73xxHQHI-M4/S | affected Build date before 250807 | Not specified |
| CNA | Hikvision | IDS-81xxHQHI-M8/S | affected Build date before 250807 | Not specified |
| CNA | Hikvision | IDS-90xxHQHI-M8/S | affected Build date before 250807 | Not specified |
| CNA | Hikvision | IDS-ExxHQHI-xx | affected Build date before 250807 | Not specified |
| CNA | Hikvision | IDS-71xxHUHI-M1/S | affected Build date before 250807 | Not specified |
| CNA | Hikvision | IDS-72xxHUHI-M1/E | affected Build date before 250807 | Not specified |
| CNA | Hikvision | IDS-72xxHUHI-M1/T | affected Build date before 250807 | Not specified |
| CNA | Hikvision | IDS-72xxHUHI-Mx/X | affected Build date before 250807 | Not specified |
| CNA | Hikvision | IDS-72xxHUHI-Mx/XT | affected Build date before 250807 | Not specified |
| CNA | Hikvision | IDS-72xxHUHI-Mx/PXT | affected Build date before 250807 | Not specified |
| CNA | Hikvision | IDS-73xxHUHI-M4/S | affected Build date before 250807 | Not specified |
| CNA | Hikvision | IDS-90xxHUHI-M8/S | affected Build date before 250807 | Not specified |
| CNA | Hikvision | IDS-ExxHUHI-xx | affected Build date before 250807 | Not specified |
| CNA | Hikvision | IDS-72xxHTHI-Mx/XT | affected Build date before 250807 | Not specified |
| CNA | Hikvision | DS-A806xxSI | affected Build date before 250807 | Not specified |
| CNA | Hikvision | DS-AT1000SI | affected Build date before 250807 | Not specified |
| CNA | Hikvision | IDS-96xxxNXI-Hx | affected Build date before 250807 | Not specified |
| CNA | Hikvision | IDS-96064NXI-I16 | affected Build date before 250807 | Not specified |
| CNA | Hikvision | IDS-96xxxNXI-Ix/AI | affected Build date before 250807 | Not specified |
| CNA | Hikvision | IDS-67xxNXI-Mx/X | affected Build date before 250807 | Not specified |
| CNA | Hikvision | IDS-76xxNXI-Mx/X | affected Build date before 250807 | Not specified |
| CNA | Hikvision | IDS-77xxNXI-Mx/X | affected Build date before 250807 | Not specified |
| CNA | Hikvision | IDS-96xxNXI-Mx/X | affected Build date before 250807 | Not specified |
| CNA | Hikvision | IDS-96xxxNXI-Mx/X | affected Build date before 250807 | Not specified |
| CNA | Hikvision | IDS-96xxxNXI-Hx/AI | affected Build date before 250807 | Not specified |
| CNA | Hikvision | IDS-96xxNXI-Mx/AI | affected Build date before 250807 | Not specified |
| CNA | Hikvision | IDS-67xxNXI-Mx/AI | affected Build date before 250807 | Not specified |
| CNA | Hikvision | IDS-67xxxNXI-Mx/AI | affected Build date before 250807 | Not specified |
| CNA | Hikvision | IDS-67xxNXI-S/T | affected Build date before 250807 | Not specified |
| CNA | Hikvision | IDS-67xxNXI-S | affected Build date before 250807 | Not specified |
| CNA | Hikvision | IDS-6704NXI/AI | affected Build date before 250807 | Not specified |
| CNA | Hikvision | IDS-67xxNXI-P1 | affected Build date before 250807 | Not specified |
| CNA | Hikvision | IDS-7608NXI-P2 | affected Build date before 250807 | Not specified |
| CNA | Hikvision | IDS-77xxNXI-P4 | affected Build date before 250807 | Not specified |
| CNA | Hikvision | IDS-96xxNXI-Px | affected Build date before 250807 | Not specified |
| CNA | Hikvision | DS-2CD1xxxG2 | affected Versions below V5.7.13_230822 (including V5.7.13_230822) | Not specified |
| CNA | Hikvision | DS-2CD3xx1G2 | affected Versions below V5.7.13_230822 (including V5.7.13_230822) | Not specified |
| CNA | Hikvision | HWI-xxxxHA | affected Versions below V5.7.13_230822 (including V5.7.13_230822) | Not specified |
| CNA | Hikvision | IPC-xxxxHA | affected Versions below V5.7.13_230822 (including V5.7.13_230822) | Not specified |
| CNA | Hikvision | DS-2CD2Dx5G1 | affected Versions below V5.7.210_240826 (including V5.7.210_240826) | Not specified |
| CNA | Hikvision | DS-2CD64x5G1 | affected Versions below V5.7.210_240826 (including V5.7.210_240826) | Not specified |
| CNA | Hikvision | DS-2CD29xxG0 | affected Versions below V5.7.21_240814 (including V5.7.21_240814) | Not specified |
| CNA | Hikvision | DS-2XE6xxxG0 | affected Versions below V5.7.7build241203 (including V5.7.7build241203) | Not specified |
| CNA | Hikvision | DS-2XC6xxxG0 | affected Versions below V5.7.7build241203 (including V5.7.7build241203) | Not specified |
| CNA | Hikvision | DS-2CD1xxxG0T | affected Versions below V5.7.23_241015 (including V5.7.23_241015) | Not specified |
| CNA | Hikvision | DS-2CD1xx1 | affected Versions below V5.7.23_241015 (including V5.7.23_241015) | Not specified |
| CNA | Hikvision | DS-2CD3xx1G0 | affected Versions below V5.7.23_241015 (including V5.7.23_241015) | Not specified |
| CNA | Hikvision | DS-2CD2xx1G0 | affected Versions below V5.7.23_241015 (including V5.7.23_241015) | Not specified |
| CNA | Hikvision | IPC-xxxxH | affected Versions below V5.7.23_241015 (including V5.7.23_241015) | Not specified |
| CNA | Hikvision | HWI-xxxHC | affected Versions below V5.7.23_241015 (including V5.7.23_241015) | Not specified |
References
| Reference | Source | Link | Tags |
|---|---|---|---|
| www.hikvision.com/en/support/cybersecurity/security-advisory/buffer-overflow-vu... | [email protected] | www.hikvision.com | |
| CVE Program record | CVE.ORG | www.cve.org | canonical |
| NVD vulnerability detail | NVD | nvd.nist.gov | canonical, analysis |
Vendor Comments And Credit
Discovery Credit
CNA: Angel Lozano Alcazar (en)
CNA: Pedro Guillen Nuñez (en)
There are currently no legacy QID mappings associated with this CVE.