{"id":"CVE-2025-66177","aliases":["EUVD-2026-2374","GHSA-x6hw-xmff-xh6q"],"status":"published","title":"There is a Stack overflow Vulnerability in the device Search and Discovery feature of Hikvision...","description":"There is a Buffer overflow Vulnerability in the device Search and Discovery feature of Hikvision NVR/DVR/CVR/IPC models. If exploited, an attacker on the same local area network (LAN) could cause the device to malfunction by sending specially crafted packets to an unpatched device.","severity":{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-11","score":0.00345,"percentile":0.28421,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":true,"fix_available":false},"cwes":["CWE-121"],"published":"2026-01-13T01:47:54Z","modified":"2026-07-09T07:16:22Z","exploits":[{"source":"pocgithub","id":"ang3lL/CVE-2025-66177","title":"ang3lL/CVE-2025-66177","date":"2026-05-11","url":"https://github.com/ang3lL/CVE-2025-66177"}],"products":[{"vendor":"hikvision","product":"ds-2cd1xx1"},{"vendor":"hikvision","product":"ds-2cd1xxxg0(t)"},{"vendor":"hikvision","product":"ds-2cd1xxxg2"},{"vendor":"hikvision","product":"ds-2cd29xxg0"},{"vendor":"hikvision","product":"ds-2cd2dx5g1"},{"vendor":"hikvision","product":"ds-2cd2xx1g0"},{"vendor":"hikvision","product":"ds-2cd3xx1g0"},{"vendor":"hikvision","product":"ds-2cd3xx1g2"},{"vendor":"hikvision","product":"ds-2cd64x5g1"},{"vendor":"hikvision","product":"ds-2xc6xxxg0"},{"vendor":"hikvision","product":"ds-2xe6xxxg0"},{"vendor":"hikvision","product":"ds-710xni-g1/(xp)/m"},{"vendor":"hikvision","product":"ds-71xxhghi-m1(/t)"},{"vendor":"hikvision","product":"ds-71xxni-q1(/xp)"},{"vendor":"hikvision","product":"ds-71xxni-q1(/xp)/m"},{"vendor":"hikvision","product":"ds-72xxhghi-m1(/t)"},{"vendor":"hikvision","product":"ds-76xxni-mx"},{"vendor":"hikvision","product":"ds-76xxni-q1(/xp)"},{"vendor":"hikvision","product":"ds-76xxni-q2(/xp)"},{"vendor":"hikvision","product":"ds-76xxni-qx(/xp)   including(d)、(e)"},{"vendor":"hikvision","product":"ds-76xxnxi-ix/s"},{"vendor":"hikvision","product":"ds-76xxnxi-ix/vpro"},{"vendor":"hikvision","product":"ds-76xxnxi-k1(/xp)"},{"vendor":"hikvision","product":"ds-76xxnxi-k1(/xp)/vpro"},{"vendor":"hikvision","product":"ds-76xxnxi-k2(/xp)"},{"vendor":"hikvision","product":"ds-76xxnxi-k2(/xp)/vpro"},{"vendor":"hikvision","product":"ds-76xxnxi-kx(/xp)  including(d)、(e)、(b)"},{"vendor":"hikvision","product":"ds-76xxnxi-kx(/xp)/vpro"},{"vendor":"hikvision","product":"ds-76xxnxi-mx/vpro"},{"vendor":"hikvision","product":"ds-77xxni-mx"},{"vendor":"hikvision","product":"ds-77xxnxi-ix/s"},{"vendor":"hikvision","product":"ds-77xxnxi-ix/vpro"},{"vendor":"hikvision","product":"ds-77xxnxi-k4(/xp)"},{"vendor":"hikvision","product":"ds-77xxnxi-k4(/xp)/vpro"},{"vendor":"hikvision","product":"ds-77xxnxi-kx(/xp) including(d)、(e)、(b)"},{"vendor":"hikvision","product":"ds-77xxnxi-kx(/xp)/vpro"},{"vendor":"hikvision","product":"ds-86xxnxi-ix/s"},{"vendor":"hikvision","product":"ds-86xxnxi-k8(/xp)"},{"vendor":"hikvision","product":"ds-86xxxnxi-mx"},{"vendor":"hikvision","product":"ds-96xxnxi-ix/s"},{"vendor":"hikvision","product":"ds-96xxnxi-mx"},{"vendor":"hikvision","product":"ds-96xxnxi-mx/vpro"},{"vendor":"hikvision","product":"ds-96xxnxi-sx"},{"vendor":"hikvision","product":"ds-96xxxni-hx"},{"vendor":"hikvision","product":"ds-96xxxni-ix"},{"vendor":"hikvision","product":"ds-96xxxnxi-mx"},{"vendor":"hikvision","product":"ds-96xxxnxi-sx"},{"vendor":"hikvision","product":"ds-a806xxsi"},{"vendor":"hikvision","product":"ds-at1000si"},{"vendor":"hikvision","product":"ds-exxhghi-xx"},{"vendor":"hikvision","product":"hwi-xxxh(c)"},{"vendor":"hikvision","product":"hwi-xxxxha"},{"vendor":"hikvision","product":"ids-6704nxi/ai"},{"vendor":"hikvision","product":"ids-67xxnxi-mx/ai"},{"vendor":"hikvision","product":"ids-67xxnxi-mx/x"},{"vendor":"hikvision","product":"ids-67xxnxi-p1"},{"vendor":"hikvision","product":"ids-67xxnxi-s"},{"vendor":"hikvision","product":"ids-67xxnxi-s/t"},{"vendor":"hikvision","product":"ids-67xxxnxi-mx/ai"},{"vendor":"hikvision","product":"ids-71xxhghi-m1(/t)"},{"vendor":"hikvision","product":"ids-71xxhqhi-m1(/t)"},{"vendor":"hikvision","product":"ids-71xxhqhi-m1/s"},{"vendor":"hikvision","product":"ids-71xxhqhi-m1/t"},{"vendor":"hikvision","product":"ids-71xxhuhi-m1/s"},{"vendor":"hikvision","product":"ids-72xxhghi-m1(/t)"},{"vendor":"hikvision","product":"ids-72xxhqhi-m1(/t)"},{"vendor":"hikvision","product":"ids-72xxhqhi-m1/e"},{"vendor":"hikvision","product":"ids-72xxhqhi-m1/t"},{"vendor":"hikvision","product":"ids-72xxhqhi-mx/xt"},{"vendor":"hikvision","product":"ids-72xxhthi-mx/xt"},{"vendor":"hikvision","product":"ids-72xxhuhi-m1/e"},{"vendor":"hikvision","product":"ids-72xxhuhi-m1/t"},{"vendor":"hikvision","product":"ids-72xxhuhi-mx/pxt"},{"vendor":"hikvision","product":"ids-72xxhuhi-mx/x"},{"vendor":"hikvision","product":"ids-72xxhuhi-mx/xt"},{"vendor":"hikvision","product":"ids-73xxhqhi-m4/s"},{"vendor":"hikvision","product":"ids-73xxhuhi-m4/s"},{"vendor":"hikvision","product":"ids-73xxhuhi-m4/s(s)"},{"vendor":"hikvision","product":"ids-7608nxi-p2"},{"vendor":"hikvision","product":"ids-76xxnxi-mx/x"},{"vendor":"hikvision","product":"ids-77xxnxi-mx/x"},{"vendor":"hikvision","product":"ids-77xxnxi-p4"},{"vendor":"hikvision","product":"ids-81xxhqhi-m8/s"},{"vendor":"hikvision","product":"ids-81xxhuhi-m8/s(s)"},{"vendor":"hikvision","product":"ids-90xxhqhi-m8/s"},{"vendor":"hikvision","product":"ids-90xxhuhi-m8/s"},{"vendor":"hikvision","product":"ids-90xxhuhi-m8/s(s)"},{"vendor":"hikvision","product":"ids-96064nxi-i16"},{"vendor":"hikvision","product":"ids-96xxnxi-mx/ai"},{"vendor":"hikvision","product":"ids-96xxnxi-mx/x"},{"vendor":"hikvision","product":"ids-96xxnxi-px"},{"vendor":"hikvision","product":"ids-96xxxnxi-hx"},{"vendor":"hikvision","product":"ids-96xxxnxi-hx/ai"},{"vendor":"hikvision","product":"ids-96xxxnxi-ix/ai"},{"vendor":"hikvision","product":"ids-96xxxnxi-mx/x"},{"vendor":"hikvision","product":"ids-exxhqhi-xx"},{"vendor":"hikvision","product":"ids-exxhuhi-xx"},{"vendor":"hikvision","product":"ipc-xxxxh"},{"vendor":"hikvision","product":"ipc-xxxxha"}],"references":[{"url":"https://www.hikvision.com/en/support/cybersecurity/security-advisory/buffer-overflow-vulnerabilities-in-some-hikvision-products/"},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-66177"},{"url":"https://www.hikvision.com/en/support/cybersecurity/security-advisory/buffer-overflow-vulnerabilities-in-some-hikvision-products"},{"url":"https://github.com/advisories/GHSA-x6hw-xmff-xh6q"}],"sources":{"cve":[{"id":"CVE-2025-66177","description":"There is a Buffer overflow Vulnerability in the device Search and Discovery feature of Hikvision NVR/DVR/CVR/IPC models. If exploited, an attacker on the same local area network (LAN) could cause the device to malfunction by sending specially crafted packets to an unpatched device.","status":"published","published":"2026-01-13T01:47:54.031Z","modified":"2026-07-09T06:22:08.882Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"cna"}],"cwes":["CWE-121"],"updated_at":"2026-11-02T14:32:53.157279Z"}],"euvd":[{"id":"EUVD-2026-2374","description":"There is a Buffer overflow Vulnerability in the device Search and Discovery feature of Hikvision NVR/DVR/CVR/IPC models. If exploited, an attacker on the same local area network (LAN) could cause the device to malfunction by sending specially crafted packets to an unpatched device.","status":"published","published":"2026-01-13T01:47:54Z","modified":"2026-07-09T06:22:08Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T18:20:04.895477Z"}],"ghsa":[{"id":"GHSA-x6hw-xmff-xh6q","title":"There is a Stack overflow Vulnerability in the device Search and Discovery feature of Hikvision...","description":"There is a Stack overflow Vulnerability in the device Search and Discovery feature of Hikvision NVR/DVR/CVR/IPC models. If exploited, an attacker on the same local area network (LAN) could cause the device to malfunction by sending specially crafted packets to an unpatched device.","status":"published","published":"2026-01-13T03:32:09Z","modified":"2026-01-13T18:32:08Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"cwes":["CWE-121"],"updated_at":"2026-11-02T15:05:35.156514Z"}],"nvd":[{"id":"CVE-2025-66177","description":"There is a Buffer overflow Vulnerability in the device Search and Discovery feature of Hikvision NVR/DVR/CVR/IPC models. If exploited, an attacker on the same local area network (LAN) could cause the device to malfunction by sending specially crafted packets to an unpatched device.","status":"published","published":"2026-01-13T03:16:01.25Z","modified":"2026-07-09T07:16:22.607Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"secondary"}],"cwes":["CWE-121"],"updated_at":"2026-11-02T14:11:56.616231Z"}]}}