CVE-2025-66176There is a Buffer overflow Vulnerability in the device Search and Discovery feature of Hikvision Access Control Products.
Updated under an hour ago ()
Does this affect you?
It affects hikvision ds-k1t331_firmware and 27 other products. Add what you run to find out whether that includes you.
No exploitation reported and no EPSS estimate yet.
Do this next
Free account, 1 product
There is a Buffer overflow Vulnerability in the device Search and Discovery feature of Hikvision Access Control Products. If exploited, an attacker on the same local area network (LAN) could cause the device to malfunction by sending specially crafted packets to an unpatched device.
- CVSS
- 8.8 HIGH (v3.1, NVD)CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
- Weakness (CWE)
- CWE-121
- Known exploited
- Not in CISA's KEV catalog
- EPSS (exploitation in the next 30 days)
- Not loaded for this CVE
- Assigned by
- Not given
- NVD analysis
- Modified
- Record last updated
- Jul 9, 2026
- First seen by InfoSec Signals
- Oct 9, 2026
Affected products
hikvision ds-k1t331_firmware hikvision:ds-k1t331_firmware | before 3.7.80 | NVD |
hikvision ds-k1t341a_firmware hikvision:ds-k1t341a_firmware | before 3.7.80 | NVD |
hikvision ds-k1t341b_firmware hikvision:ds-k1t341b_firmware | before 3.7.80 | NVD |
hikvision ds-k1t671_firmware hikvision:ds-k1t671_firmware | before 3.7.80 | NVD |
hikvision ds-k5671_firmware hikvision:ds-k5671_firmware | before 3.7.80 | NVD |
hikvision ds-k1t672_firmware hikvision:ds-k1t672_firmware | before 3.7.80 | NVD |
hikvision ds-k1t680_firmware hikvision:ds-k1t680_firmware | before 3.7.80 | NVD |
hikvision ds-k1t981_firmware hikvision:ds-k1t981_firmware | before 3.7.80 | NVD |
hikvision ds-k1t341c_firmware hikvision:ds-k1t341c_firmware | before 3.3.180 | NVD |
hikvision ds-k1t670_firmware hikvision:ds-k1t670_firmware | before 4.48.0 | NVD |
hikvision ds-k1t673_firmware hikvision:ds-k1t673_firmware | before 4.48.0 | NVD |
hikvision ds-k1t8003_firmware hikvision:ds-k1t8003_firmware | through 1.4.21 | NVD |
hikvision ds-k1t804a_firmware hikvision:ds-k1t804a_firmware | before 1.4.22 | NVD |
hikvision ds-k1t804b_firmware hikvision:ds-k1t804b_firmware | before 1.4.23 | NVD |
hikvision ds-k1t201a_firmware hikvision:ds-k1t201a_firmware | before 1.3.65 | NVD |
hikvision ds-k1t105a_firmware hikvision:ds-k1t105a_firmware | before 1.3.65 | NVD |
hikvision ds-k1t342_firmware hikvision:ds-k1t342_firmware | before 4.48.0 | NVD |
hikvision ds-k1t343_firmware hikvision:ds-k1t343_firmware | before 4.48.0 | NVD |
hikvision ds-k1t344_firmware hikvision:ds-k1t344_firmware | before 4.48.0 | NVD |
hikvision ds-k1t6qt-f72_firmware hikvision:ds-k1t6qt-f72_firmware | before 4.48.0 | NVD |
hikvision ds-k1t6qt-f43_firmware hikvision:ds-k1t6qt-f43_firmware | before 4.48.0 | NVD |
hikvision ds-k1t8005_firmware hikvision:ds-k1t8005_firmware | before 3.25.40 | NVD |
hikvision ds-k1t808_firmware hikvision:ds-k1t808_firmware | before 3.25.40 | NVD |
hikvision ds-k1t320_firmware hikvision:ds-k1t320_firmware | before 3.9.40 | NVD |
hikvision ds-k1t321_firmware hikvision:ds-k1t321_firmware | before 3.9.40 | NVD |
hikvision ds-k1t323_firmware hikvision:ds-k1t323_firmware | before 4.23.41 | NVD |
hikvision ds-k1t510_firmware hikvision:ds-k1t510_firmware | before 4.23.41 | NVD |
hikvision ds-k5033_firmware hikvision:ds-k5033_firmware | before 4.37.40 | NVD |
References
- https://www.hikvision.com/en/support/cybersecurity/security-advisory/buffer-overflow-vulnerabilities-in-some-hikvision-products/vendor-advisory
- https://www.talosintelligence.com/vulnerability_reports/TALOS-2025-2281
The CVE record on cve.org NVD's entry
The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.