CVE-2025-66177
- State
- Published
- Severity
- 8.8 High
- Published
- Jan 13, 2026
- Updated
- Jul 9, 2026
- Reserved
- Nov 24, 2025
Description
There is a Buffer overflow Vulnerability in the device Search and Discovery feature of Hikvision NVR/DVR/CVR/IPC models. If exploited, an attacker on the same local area network (LAN) could cause the device to malfunction by sending specially crafted packets to an unpatched device.
Scores
| CVSS | Score | Vector | Source |
|---|---|---|---|
| 3.1 | 8.8 High | CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H | hikvision |
Weaknesses
- CWE-121 Stack-based Buffer Overflow
Affected Products
| Product | Versions |
|---|---|
DS-96xxxNI-HxHikvision |
|
DS-96xxxNI-IxHikvision |
|
DS-96xxNXI-SxHikvision |
|
DS-96xxxNXI-SxHikvision |
|
DS-76xxNXI-Mx/VProHikvision |
|
DS-96xxNXI-Mx/VProHikvision |
|
DS-76xxNI-MxHikvision |
|
DS-77xxNI-MxHikvision |
|
DS-96xxNXI-MxHikvision |
|
DS-96xxxNXI-MxHikvision |
|
DS-86xxxNXI-MxHikvision |
|
DS-76xxNXI-Ix/SHikvision |
|
DS-77xxNXI-Ix/SHikvision |
|
DS-86xxNXI-Ix/SHikvision |
|
DS-96xxNXI-Ix/SHikvision |
|
DS-76xxNXI-Ix/VProHikvision |
|
DS-77xxNXI-Ix/VProHikvision |
|
DS-76xxNXI-Kx(/xP) including(D)、(E)、(B)Hikvision |
|
DS-77xxNXI-Kx(/xP) including(D)、(E)、(B)Hikvision |
|
DS-76xxNXI-Kx(/xP)/VproHikvision |
|
DS-77xxNXI-Kx(/xP)/VproHikvision |
|
DS-76xxNI-Qx(/xP) including(D)、(E)Hikvision |
|
DS-71xxNI-Q1(/xP)/MHikvision |
|
DS-71xxNI-Q1(/xP)Hikvision |
|
DS-710xNI-G1/(xP)/MHikvision |
|
DS-71xxNI-Q1(/xP)Hikvision |
|
DS-71xxNI-Q1(/xP)/MHikvision |
|
DS-76xxNI-Q1(/xP)Hikvision |
|
DS-76xxNI-Q2(/xP)Hikvision |
|
DS-76xxNXI-K1(/xP)Hikvision |
|
DS-76xxNXI-K2(/xP)Hikvision |
|
DS-77xxNXI-K4(/xP)Hikvision |
|
DS-86xxNXI-K8(/xP)Hikvision |
|
DS-76xxNXI-K1(/xP)/VProHikvision |
|
DS-76xxNXI-K2(/xP)/VProHikvision |
|
DS-77xxNXI-K4(/xP)/VProHikvision |
|
iDS-71xxHGHI-M1(/T)Hikvision |
|
iDS-72xxHGHI-M1(/T)Hikvision |
|
iDS-71xxHQHI-M1(/T)Hikvision |
|
iDS-72xxHQHI-M1(/T)Hikvision |
|
iDS-72xxHQHI-Mx/XTHikvision |
|
iDS-72xxHUHI-Mx/XTHikvision |
|
iDS-72xxHTHI-Mx/XTHikvision |
|
iDS-90xxHUHI-M8/S(S)Hikvision |
|
iDS-73xxHUHI-M4/S(S)Hikvision |
|
iDS-81xxHUHI-M8/S(S)Hikvision |
|
DS-71xxHGHI-M1(/T)Hikvision |
|
DS-72xxHGHI-M1(/T)Hikvision |
|
DS-ExxHGHI-xxHikvision |
|
iDS-71xxHQHI-M1/SHikvision |
|
iDS-72xxHQHI-M1/EHikvision |
|
iDS-71xxHQHI-M1/THikvision |
|
iDS-72xxHQHI-M1/THikvision |
|
iDS-72xxHQHI-Mx/XTHikvision |
|
iDS-73xxHQHI-M4/SHikvision |
|
iDS-81xxHQHI-M8/SHikvision |
|
iDS-90xxHQHI-M8/SHikvision |
|
iDS-ExxHQHI-xxHikvision |
|
iDS-71xxHUHI-M1/SHikvision |
|
iDS-72xxHUHI-M1/EHikvision |
|
iDS-72xxHUHI-M1/THikvision |
|
iDS-72xxHUHI-Mx/XHikvision |
|
iDS-72xxHUHI-Mx/XTHikvision |
|
iDS-72xxHUHI-Mx/PXTHikvision |
|
iDS-73xxHUHI-M4/SHikvision |
|
iDS-90xxHUHI-M8/SHikvision |
|
iDS-ExxHUHI-xxHikvision |
|
iDS-72xxHTHI-Mx/XTHikvision |
|
DS-A806xxSIHikvision |
|
DS-AT1000SIHikvision |
|
iDS-96xxxNXI-HxHikvision |
|
iDS-96064NXI-I16Hikvision |
|
iDS-96xxxNXI-Ix/AIHikvision |
|
iDS-67xxNXI-Mx/XHikvision |
|
iDS-76xxNXI-Mx/XHikvision |
|
iDS-77xxNXI-Mx/XHikvision |
|
iDS-96xxNXI-Mx/XHikvision |
|
iDS-96xxxNXI-Mx/XHikvision |
|
iDS-96xxxNXI-Hx/AIHikvision |
|
iDS-96xxNXI-Mx/AIHikvision |
|
iDS-67xxNXI-Mx/AIHikvision |
|
iDS-67xxxNXI-Mx/AIHikvision |
|
iDS-67xxNXI-S/THikvision |
|
iDS-67xxNXI-SHikvision |
|
iDS-6704NXI/AIHikvision |
|
iDS-67xxNXI-P1Hikvision |
|
iDS-7608NXI-P2Hikvision |
|
iDS-77xxNXI-P4Hikvision |
|
iDS-96xxNXI-PxHikvision |
|
DS-2CD1xxxG2Hikvision |
|
DS-2CD3xx1G2Hikvision |
|
HWI-xxxxHAHikvision |
|
IPC-xxxxHAHikvision |
|
DS-2CD2Dx5G1Hikvision |
|
DS-2CD64x5G1Hikvision |
|
DS-2CD29xxG0Hikvision |
|
DS-2XE6xxxG0Hikvision |
|
DS-2XC6xxxG0Hikvision |
|
DS-2CD1xxxG0(T)Hikvision |
|
DS-2CD1xx1Hikvision |
|
DS-2CD3xx1G0Hikvision |
|
DS-2CD2xx1G0Hikvision |
|
IPC-xxxxHHikvision |
|
HWI-xxxH(C)Hikvision |
|
References
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.