CVE-2025-66176
There is a Stack overflow Vulnerability in the device Search and Discovery feature of Hikvision...
There is a Buffer overflow Vulnerability in the device Search and Discovery feature of Hikvision Access Control Products. If exploited, an attacker on the same local area network (LAN) could cause the device to malfunction by sending specially crafted packets to an unpatched device.
Attack profile
How easy it is to exploit
- Attack vector
- Adjacent network
- Complexity
- Low
- Privileges needed
- None
- User interaction
- None
What an attacker can affect
- Confidentiality
- High
- Integrity
- High
- Availability
- High
Exploit likelihood
What each source reports
CVE List Score used
There is a Buffer overflow Vulnerability in the device Search and Discovery feature of Hikvision Access Control Products. If exploited, an attacker on the same local area network (LAN) could cause the device to malfunction by sending specially crafted packets to an unpatched device.
- Record
CVE-2025-66176- CVSS 3.1
- 8.8 High
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - Weakness
- CWE-121
- Updated
- 2026-11-02
EUVDEUVD-2026-2382
There is a Buffer overflow Vulnerability in the device Search and Discovery feature of Hikvision Access Control Products. If exploited, an attacker on the same local area network (LAN) could cause the device to malfunction by sending specially crafted packets to an unpatched device.
- Record
EUVD-2026-2382- CVSS 3.1
- 8.8 High
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
GitHub AdvisoriesGHSA-3mmv-v6g2-g7c6
There is a Stack overflow Vulnerability in the device Search and Discovery feature of Hikvision...
There is a Stack overflow Vulnerability in the device Search and Discovery feature of Hikvision Access Control Products. If exploited, an attacker on the same local area network (LAN) could cause the device to malfunction by sending specially crafted packets to an unpatched device.
- Record
GHSA-3mmv-v6g2-g7c6- CVSS 3.1
- 8.8 High
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - Weakness
- CWE-121
- Updated
- 2026-11-02
NVD
There is a Buffer overflow Vulnerability in the device Search and Discovery feature of Hikvision Access Control Products. If exploited, an attacker on the same local area network (LAN) could cause the device to malfunction by sending specially crafted packets to an unpatched device.
- Record
CVE-2025-66176- CVSS 3.1
- 8.8 High
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - Weakness
- CWE-121
- Updated
- 2026-11-02
Affected products
- hikvision ds-k1t105a firmware
- hikvision ds-k1t201a/k1t105a
- hikvision ds-k1t201a firmware
- hikvision ds-k1t320/ds-k1t321
- hikvision ds-k1t320 firmware
- hikvision ds-k1t321 firmware
- hikvision ds-k1t323/ds-k1t510
- hikvision ds-k1t323 firmware
- hikvision ds-k1t331
- hikvision ds-k1t331 firmware
- hikvision ds-k1t341a/k1t341b
- hikvision ds-k1t341a firmware
Show 34 moreShow less
- hikvision ds-k1t341b firmware
- hikvision ds-k1t341c
- hikvision ds-k1t341c firmware
- hikvision ds-k1t342/k1t343/k1t344/ds-k1t6qt-f72/f43
- hikvision ds-k1t342 firmware
- hikvision ds-k1t343 firmware
- hikvision ds-k1t344 firmware
- hikvision ds-k1t510 firmware
- hikvision ds-k1t670/k1t673
- hikvision ds-k1t670 firmware
- hikvision ds-k1t671/k5671
- hikvision ds-k1t671 firmware
- hikvision ds-k1t672
- hikvision ds-k1t672 firmware
- hikvision ds-k1t673 firmware
- hikvision ds-k1t680
- hikvision ds-k1t680 firmware
- hikvision ds-k1t6qt-f43 firmware
- hikvision ds-k1t6qt-f72 firmware
- hikvision ds-k1t8003
- hikvision ds-k1t8003/8004
- hikvision ds-k1t8003 firmware
- hikvision ds-k1t8005/ds-k1t808
- hikvision ds-k1t8005 firmware
- hikvision ds-k1t804a
- hikvision ds-k1t804a firmware
- hikvision ds-k1t804b
- hikvision ds-k1t804b firmware
- hikvision ds-k1t808 firmware
- hikvision ds-k1t981
- hikvision ds-k1t981 firmware
- hikvision ds-k5033
- hikvision ds-k5033 firmware
- hikvision ds-k5671 firmware
History
| Recorded | Changed | Sources |
|---|---|---|
| first indexed | CVE List, EUVD, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2025-66176 is a high vulnerability (CVSS 8.8) in Hikvision Ds-k1t105a Firmware, published January 13, 2026. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.47%, the 40th percentile. No source names a fixed version.