CVE-2025-66177
There is a Stack overflow Vulnerability in the device Search and Discovery feature of Hikvision...
There is a Buffer overflow Vulnerability in the device Search and Discovery feature of Hikvision NVR/DVR/CVR/IPC models. If exploited, an attacker on the same local area network (LAN) could cause the device to malfunction by sending specially crafted packets to an unpatched device.
Attack profile
How easy it is to exploit
- Attack vector
- Adjacent network
- Complexity
- Low
- Privileges needed
- None
- User interaction
- None
What an attacker can affect
- Confidentiality
- High
- Integrity
- High
- Availability
- High
Exploit likelihood
What each source reports
CVE List Score used
There is a Buffer overflow Vulnerability in the device Search and Discovery feature of Hikvision NVR/DVR/CVR/IPC models. If exploited, an attacker on the same local area network (LAN) could cause the device to malfunction by sending specially crafted packets to an unpatched device.
- Record
CVE-2025-66177- CVSS 3.1
- 8.8 High
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - Weakness
- CWE-121
- Updated
- 2026-11-02
EUVDEUVD-2026-2374
There is a Buffer overflow Vulnerability in the device Search and Discovery feature of Hikvision NVR/DVR/CVR/IPC models. If exploited, an attacker on the same local area network (LAN) could cause the device to malfunction by sending specially crafted packets to an unpatched device.
- Record
EUVD-2026-2374- CVSS 3.1
- 8.8 High
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
GitHub AdvisoriesGHSA-x6hw-xmff-xh6q
There is a Stack overflow Vulnerability in the device Search and Discovery feature of Hikvision...
There is a Stack overflow Vulnerability in the device Search and Discovery feature of Hikvision NVR/DVR/CVR/IPC models. If exploited, an attacker on the same local area network (LAN) could cause the device to malfunction by sending specially crafted packets to an unpatched device.
- Record
GHSA-x6hw-xmff-xh6q- CVSS 3.1
- 8.8 High
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - Weakness
- CWE-121
- Updated
- 2026-11-02
NVD
There is a Buffer overflow Vulnerability in the device Search and Discovery feature of Hikvision NVR/DVR/CVR/IPC models. If exploited, an attacker on the same local area network (LAN) could cause the device to malfunction by sending specially crafted packets to an unpatched device.
- Record
CVE-2025-66177- CVSS 3.1
- 8.8 High
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - Weakness
- CWE-121
- Updated
- 2026-11-02
Affected products
- hikvision ds-2cd1xx1
- hikvision ds-2cd1xxxg0(t)
- hikvision ds-2cd1xxxg2
- hikvision ds-2cd29xxg0
- hikvision ds-2cd2dx5g1
- hikvision ds-2cd2xx1g0
- hikvision ds-2cd3xx1g0
- hikvision ds-2cd3xx1g2
- hikvision ds-2cd64x5g1
- hikvision ds-2xc6xxxg0
- hikvision ds-2xe6xxxg0
- hikvision ds-710xni-g1/(xp)/m
Show 87 moreShow less
- hikvision ds-71xxhghi-m1(/t)
- hikvision ds-71xxni-q1(/xp)
- hikvision ds-71xxni-q1(/xp)/m
- hikvision ds-72xxhghi-m1(/t)
- hikvision ds-76xxni-mx
- hikvision ds-76xxni-q1(/xp)
- hikvision ds-76xxni-q2(/xp)
- hikvision ds-76xxni-qx(/xp) including(d)、(e)
- hikvision ds-76xxnxi-ix/s
- hikvision ds-76xxnxi-ix/vpro
- hikvision ds-76xxnxi-k1(/xp)
- hikvision ds-76xxnxi-k1(/xp)/vpro
- hikvision ds-76xxnxi-k2(/xp)
- hikvision ds-76xxnxi-k2(/xp)/vpro
- hikvision ds-76xxnxi-kx(/xp) including(d)、(e)、(b)
- hikvision ds-76xxnxi-kx(/xp)/vpro
- hikvision ds-76xxnxi-mx/vpro
- hikvision ds-77xxni-mx
- hikvision ds-77xxnxi-ix/s
- hikvision ds-77xxnxi-ix/vpro
- hikvision ds-77xxnxi-k4(/xp)
- hikvision ds-77xxnxi-k4(/xp)/vpro
- hikvision ds-77xxnxi-kx(/xp) including(d)、(e)、(b)
- hikvision ds-77xxnxi-kx(/xp)/vpro
- hikvision ds-86xxnxi-ix/s
- hikvision ds-86xxnxi-k8(/xp)
- hikvision ds-86xxxnxi-mx
- hikvision ds-96xxnxi-ix/s
- hikvision ds-96xxnxi-mx
- hikvision ds-96xxnxi-mx/vpro
- hikvision ds-96xxnxi-sx
- hikvision ds-96xxxni-hx
- hikvision ds-96xxxni-ix
- hikvision ds-96xxxnxi-mx
- hikvision ds-96xxxnxi-sx
- hikvision ds-a806xxsi
- hikvision ds-at1000si
- hikvision ds-exxhghi-xx
- hikvision hwi-xxxh(c)
- hikvision hwi-xxxxha
- hikvision ids-6704nxi/ai
- hikvision ids-67xxnxi-mx/ai
- hikvision ids-67xxnxi-mx/x
- hikvision ids-67xxnxi-p1
- hikvision ids-67xxnxi-s
- hikvision ids-67xxnxi-s/t
- hikvision ids-67xxxnxi-mx/ai
- hikvision ids-71xxhghi-m1(/t)
- hikvision ids-71xxhqhi-m1(/t)
- hikvision ids-71xxhqhi-m1/s
- hikvision ids-71xxhqhi-m1/t
- hikvision ids-71xxhuhi-m1/s
- hikvision ids-72xxhghi-m1(/t)
- hikvision ids-72xxhqhi-m1(/t)
- hikvision ids-72xxhqhi-m1/e
- hikvision ids-72xxhqhi-m1/t
- hikvision ids-72xxhqhi-mx/xt
- hikvision ids-72xxhthi-mx/xt
- hikvision ids-72xxhuhi-m1/e
- hikvision ids-72xxhuhi-m1/t
- hikvision ids-72xxhuhi-mx/pxt
- hikvision ids-72xxhuhi-mx/x
- hikvision ids-72xxhuhi-mx/xt
- hikvision ids-73xxhqhi-m4/s
- hikvision ids-73xxhuhi-m4/s
- hikvision ids-73xxhuhi-m4/s(s)
- hikvision ids-7608nxi-p2
- hikvision ids-76xxnxi-mx/x
- hikvision ids-77xxnxi-mx/x
- hikvision ids-77xxnxi-p4
- hikvision ids-81xxhqhi-m8/s
- hikvision ids-81xxhuhi-m8/s(s)
- hikvision ids-90xxhqhi-m8/s
- hikvision ids-90xxhuhi-m8/s
- hikvision ids-90xxhuhi-m8/s(s)
- hikvision ids-96064nxi-i16
- hikvision ids-96xxnxi-mx/ai
- hikvision ids-96xxnxi-mx/x
- hikvision ids-96xxnxi-px
- hikvision ids-96xxxnxi-hx
- hikvision ids-96xxxnxi-hx/ai
- hikvision ids-96xxxnxi-ix/ai
- hikvision ids-96xxxnxi-mx/x
- hikvision ids-exxhqhi-xx
- hikvision ids-exxhuhi-xx
- hikvision ipc-xxxxh
- hikvision ipc-xxxxha
Public exploits
Links only. Every CVE stores no exploit code.
| Source | Link | Date |
|---|---|---|
| PoC in GitHub | ang3lL/CVE-2025-66177 | 2026-05-11 |
History
| Recorded | Changed | Sources |
|---|---|---|
| first indexed | CVE List, EUVD, GitHub Advisories, NVD, PoC in GitHub |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2025-66177 is a high vulnerability (CVSS 8.8) in Hikvision Ds-2cd1xx1, published January 13, 2026. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 0.34%, the 28th percentile. No source names a fixed version.