CVE-2025-66177 - CVE House
Back to Database
Status published High CVE-2025-66177

There is a Buffer overflow Vulnerability in the device Search...

Vulnerability Description

There is a Buffer overflow Vulnerability in the device Search and Discovery feature of Hikvision NVR/DVR/CVR/IPC models. If exploited, an attacker on the same local area network (LAN) could cause the device to malfunction by sending specially crafted packets to an unpatched device.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2025-66177

Credits & Attribution

The following person or organization is credited with identifying this vulnerability, as recorded in the NVD database:

  • Angel Lozano Alcazar
  • Pedro Guillen Nuñez

References

More from Hikvision

View All →
CVE-2025-66176
There is a Buffer overflow Vulnerability in the device Search...
High 8.8
CVE-2025-66174
There is an improper authentication vulnerability in some Hikvision DVR...
Medium 6.5
CVE-2025-66173
There is a privilege escalation vulnerability in some Hikvision DVR...
Medium 6.2
CVE-2025-39247
There is an Access Control Vulnerability in some HikCentral Professional...
High 8.6
CVE-2025-39246
There is an Unquoted Service Path Vulnerability in some HikCentral...
Medium 5.3

Affected Vendor

Affected Software

DS-96xxxNI-Hx, DS-96xxxNI-Ix, DS-96xxNXI-Sx, DS-96xxxNXI-Sx, DS-76xxNXI-Mx/VPro, DS-96xxNXI-Mx/VPro, DS-76xxNI-Mx, DS-77xxNI-Mx, DS-96xxNXI-Mx, DS-96xxxNXI-Mx, DS-86xxxNXI-Mx, DS-76xxNXI-Ix/S, DS-77xxNXI-Ix/S, DS-86xxNXI-Ix/S, DS-96xxNXI-Ix/S, DS-76xxNXI-Ix/VPro, DS-77xxNXI-Ix/VPro, DS-76xxNXI-Kx(/xP) including(D)、(E)、(B), DS-77xxNXI-Kx(/xP) including(D)、(E)、(B), DS-76xxNXI-Kx(/xP)/Vpro, DS-77xxNXI-Kx(/xP)/Vpro, DS-76xxNI-Qx(/xP) including(D)、(E), DS-71xxNI-Q1(/xP)/M, DS-71xxNI-Q1(/xP), DS-710xNI-G1/(xP)/M, DS-76xxNI-Q1(/xP), DS-76xxNI-Q2(/xP), DS-76xxNXI-K1(/xP), DS-76xxNXI-K2(/xP), DS-77xxNXI-K4(/xP), DS-86xxNXI-K8(/xP), DS-76xxNXI-K1(/xP)/VPro, DS-76xxNXI-K2(/xP)/VPro, DS-77xxNXI-K4(/xP)/VPro, iDS-71xxHGHI-M1(/T), iDS-72xxHGHI-M1(/T), iDS-71xxHQHI-M1(/T), iDS-72xxHQHI-M1(/T), iDS-72xxHQHI-Mx/XT, iDS-72xxHUHI-Mx/XT, iDS-72xxHTHI-Mx/XT, iDS-90xxHUHI-M8/S(S), iDS-73xxHUHI-M4/S(S), iDS-81xxHUHI-M8/S(S), DS-71xxHGHI-M1(/T), DS-72xxHGHI-M1(/T), DS-ExxHGHI-xx, iDS-71xxHQHI-M1/S, iDS-72xxHQHI-M1/E, iDS-71xxHQHI-M1/T, iDS-72xxHQHI-M1/T, iDS-73xxHQHI-M4/S, iDS-81xxHQHI-M8/S, iDS-90xxHQHI-M8/S, iDS-ExxHQHI-xx, iDS-71xxHUHI-M1/S, iDS-72xxHUHI-M1/E, iDS-72xxHUHI-M1/T, iDS-72xxHUHI-Mx/X, iDS-72xxHUHI-Mx/PXT, iDS-73xxHUHI-M4/S, iDS-90xxHUHI-M8/S, iDS-ExxHUHI-xx, DS-A806xxSI, DS-AT1000SI, iDS-96xxxNXI-Hx, iDS-96064NXI-I16, iDS-96xxxNXI-Ix/AI, iDS-67xxNXI-Mx/X, iDS-76xxNXI-Mx/X, iDS-77xxNXI-Mx/X, iDS-96xxNXI-Mx/X, iDS-96xxxNXI-Mx/X, iDS-96xxxNXI-Hx/AI, iDS-96xxNXI-Mx/AI, iDS-67xxNXI-Mx/AI, iDS-67xxxNXI-Mx/AI, iDS-67xxNXI-S/T, iDS-67xxNXI-S, iDS-6704NXI/AI, iDS-67xxNXI-P1, iDS-7608NXI-P2, iDS-77xxNXI-P4, iDS-96xxNXI-Px, DS-2CD1xxxG2, DS-2CD3xx1G2, HWI-xxxxHA, IPC-xxxxHA, DS-2CD2Dx5G1, DS-2CD64x5G1, DS-2CD29xxG0, DS-2XE6xxxG0, DS-2XC6xxxG0, DS-2CD1xxxG0(T), DS-2CD1xx1, DS-2CD3xx1G0, DS-2CD2xx1G0, IPC-xxxxH, HWI-xxxH(C)
Vulnerable Versions:
Build date before 250807, Versions below V5.7.13_230822 (including V5.7.13_230822), Versions below V5.7.210_240826 (including V5.7.210_240826), Versions below V5.7.21_240814 (including V5.7.21_240814), Versions below V5.7.7build241203 (including V5.7.7build241203), Versions below V5.7.23_241015 (including V5.7.23_241015)

Timeline

Official Publish: January 13th, 2026
Last Modified: July 9th, 2026
Added to House: July 22nd, 2026

CVSS Vectors

V3: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.