Riskcovery

CVE-2025-66176

State
Published
Severity
8.8 High
Published
Jan 13, 2026
Updated
Jul 9, 2026
Reserved
Nov 24, 2025

Read the record on cve.org

Description

There is a Buffer overflow Vulnerability in the device Search and Discovery feature of Hikvision Access Control Products. If exploited, an attacker on the same local area network (LAN) could cause the device to malfunction by sending specially crafted packets to an unpatched device.

Scores

CVSSScoreVectorSource
3.18.8 HighCVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:Hhikvision

Weaknesses

  • CWE-121 Stack-based Buffer Overflow

Affected Products

ProductVersions
DS-K1T331Hikvision
  • Versions below V3.7.80Affected
DS-K1T341A/K1T341BHikvision
  • Versions below V3.7.80Affected
DS-K1T671/K5671Hikvision
  • Versions below V3.7.80Affected
DS-K1T672Hikvision
  • Versions below V3.7.80Affected
DS-K1T680Hikvision
  • Versions below V3.7.80Affected
DS-K1T981Hikvision
  • Versions below V3.7.80Affected
DS-K1T341CHikvision
  • Versions below V3.3.180Affected
DS-K1T670/K1T673Hikvision
  • Versions below V4.48.0Affected
DS-K1T8003Hikvision
  • Versions below V1.4.21Affected
DS-K1T804AHikvision
  • Versions below V1.4.22Affected
DS-K1T8003/8004Hikvision
  • Versions below V1.4.21Affected
DS-K1T804AHikvision
  • Versions below V1.4.22Affected
DS-K1T804BHikvision
  • Versions below V1.4.23Affected
DS-K1T201A/K1T105AHikvision
  • Versions below V1.3.65Affected
DS-K1T342/K1T343/K1T344/DS-K1T6QT-F72/F43Hikvision
  • Versions below V4.48.0Affected
DS-K1T8005/DS-K1T808Hikvision
  • Versions below V3.25.40Affected
DS-K1T320/DS-K1T321Hikvision
  • Versions below V3.9.40Affected
DS-K1T323/DS-K1T510Hikvision
  • Versions below V4.23.41Affected
DS-K5033Hikvision
  • Versions below V4.37.40Affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.