CVEvulnerability
CVE-2025-66176
8.8 HIGH
Official page ↗
- Status
- Modified
- Published
- 2026-01-13
- Last modified
- 2026-07-09
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 8.8 HIGH — CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
- Weaknesses
- CWE-121
Description
There is a Buffer overflow Vulnerability in the device Search and Discovery feature of Hikvision Access Control Products. If exploited, an attacker on the same local area network (LAN) could cause the device to malfunction by sending specially crafted packets to an unpatched device.
Affected configurations
• hikvision ds-k1t331 firmware (< 3.7.80)
• hikvision ds-k1t341a firmware (< 3.7.80)
• hikvision ds-k1t341b firmware (< 3.7.80)
• hikvision ds-k1t671 firmware (< 3.7.80)
• hikvision ds-k5671 firmware (< 3.7.80)
• hikvision ds-k1t672 firmware (< 3.7.80)
• hikvision ds-k1t680 firmware (< 3.7.80)
• hikvision ds-k1t981 firmware (< 3.7.80)
• hikvision ds-k1t341c firmware (< 3.3.180)
• hikvision ds-k1t670 firmware (< 4.48.0)
• hikvision ds-k1t673 firmware (< 4.48.0)
• hikvision ds-k1t8003 firmware (<= 1.4.21)
• hikvision ds-k1t804a firmware (< 1.4.22)
• hikvision ds-k1t804b firmware (< 1.4.23)
• hikvision ds-k1t201a firmware (< 1.3.65)
• hikvision ds-k1t105a firmware (< 1.3.65)
• hikvision ds-k1t342 firmware (< 4.48.0)
• hikvision ds-k1t343 firmware (< 4.48.0)
• hikvision ds-k1t344 firmware (< 4.48.0)
• hikvision ds-k1t6qt-f72 firmware (< 4.48.0)
• hikvision ds-k1t6qt-f43 firmware (< 4.48.0)
• hikvision ds-k1t8005 firmware (< 3.25.40)
• hikvision ds-k1t808 firmware (< 3.25.40)
• hikvision ds-k1t320 firmware (< 3.9.40)
• hikvision ds-k1t321 firmware (< 3.9.40)
• hikvision ds-k1t323 firmware (< 4.23.41)
• hikvision ds-k1t510 firmware (< 4.23.41)
• hikvision ds-k5033 firmware (< 4.37.40)
Related
Weakness · CWE (1)
- CWE-121 Stack-based Buffer Overflow weakness