CVE-2025-66174 - CVE House
Back to Database
Status published Medium CVE-2025-66174

There is an improper authentication vulnerability in some Hikvision DVR...

Vulnerability Description

There is an improper authentication vulnerability in some Hikvision DVR products. Due to the improper implementation of authentication for the serial port, an attacker with physical access could exploit this vulnerability by connecting to the affected products and run a series of commands.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2025-66174

Credits & Attribution

The following person or organization is credited with identifying this vulnerability, as recorded in the NVD database:

  • Aaron J Jose

References

More from Hikvision

View All →
CVE-2025-66177
There is a Buffer overflow Vulnerability in the device Search...
High 8.8
CVE-2025-66176
There is a Buffer overflow Vulnerability in the device Search...
High 8.8
CVE-2025-66173
There is a privilege escalation vulnerability in some Hikvision DVR...
Medium 6.2
CVE-2025-39247
There is an Access Control Vulnerability in some HikCentral Professional...
High 8.6
CVE-2025-39246
There is an Unquoted Service Path Vulnerability in some HikCentral...
Medium 5.3

Affected Vendor

Affected Software

DS-7104HGHI-F1, DS-7204HGHI-F1
Vulnerable Versions:
Versions below V4.30.122_201107 (including V4.30.122_201107)

Timeline

Official Publish: December 19th, 2025
Last Modified: December 19th, 2025
Added to House: July 22nd, 2026

CVSS Vectors

V3: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.