CVE-2025-66176 - CVE House
Back to Database
Status published High CVE-2025-66176

There is a Buffer overflow Vulnerability in the device Search...

Vulnerability Description

There is a Buffer overflow Vulnerability in the device Search and Discovery feature of Hikvision Access Control Products. If exploited, an attacker on the same local area network (LAN) could cause the device to malfunction by sending specially crafted packets to an unpatched device.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2025-66176

Credits & Attribution

The following person or organization is credited with identifying this vulnerability, as recorded in the NVD database:

  • Matt Wiseman of Cisco Talos

References

More from Hikvision

View All →
CVE-2025-66177
There is a Buffer overflow Vulnerability in the device Search...
High 8.8
CVE-2025-66174
There is an improper authentication vulnerability in some Hikvision DVR...
Medium 6.5
CVE-2025-66173
There is a privilege escalation vulnerability in some Hikvision DVR...
Medium 6.2
CVE-2025-39247
There is an Access Control Vulnerability in some HikCentral Professional...
High 8.6
CVE-2025-39246
There is an Unquoted Service Path Vulnerability in some HikCentral...
Medium 5.3

Affected Vendor

Affected Software

DS-K1T331, DS-K1T341A/K1T341B, DS-K1T671/K5671, DS-K1T672, DS-K1T680, DS-K1T981, DS-K1T341C, DS-K1T670/K1T673, DS-K1T8003, DS-K1T804A, DS-K1T8003/8004, DS-K1T804B, DS-K1T201A/K1T105A, DS-K1T342/K1T343/K1T344/DS-K1T6QT-F72/F43, DS-K1T8005/DS-K1T808, DS-K1T320/DS-K1T321, DS-K1T323/DS-K1T510, DS-K5033
Vulnerable Versions:
Versions below V3.7.80, Versions below V3.3.180, Versions below V4.48.0, Versions below V1.4.21, Versions below V1.4.22, Versions below V1.4.23, Versions below V1.3.65, Versions below V3.25.40, Versions below V3.9.40, Versions below V4.23.41, Versions below V4.37.40

Timeline

Official Publish: January 13th, 2026
Last Modified: July 9th, 2026
Added to House: July 22nd, 2026

CVSS Vectors

V3: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.