CVE-2025-66176
What it is
There is a Buffer overflow Vulnerability in the device Search and Discovery feature of Hikvision Access Control Products. If exploited, an attacker on the same local area network (LAN) could cause the device to malfunction by sending specially crafted packets to an unpatched device.
At a glance
- Exploitability
- Can be exploited from the same network segment without logging in. High risk of data exposure, data tampering, service disruption.
- Exploit odds
- 0.5% chance of exploitation in the next 30 days (EPSS).
- Fix
- A patch, advisory or fixed version is referenced. Upgrade or apply it.
Timeline
- PublishedDisclosed publicly on CVE.org and NVD
- Last updatedMost recent change to the record
Details
- Published
- Last modified
- Exploit probability
- 0.5% · EPSS, next 30 days
- Weakness
- CWE-121
- Record status
- Modified
Affected
- Hikvision ds-k1t331 Firmware < 3.7.80
- Hikvision ds-k1t341a Firmware < 3.7.80
- Hikvision ds-k1t341b Firmware < 3.7.80
- Hikvision ds-k1t671 Firmware < 3.7.80
- Hikvision ds-k5671 Firmware < 3.7.80
- Hikvision ds-k1t672 Firmware < 3.7.80
- Hikvision ds-k1t680 Firmware < 3.7.80
- Hikvision ds-k1t981 Firmware < 3.7.80
Attack profile CVSS 3.1 · 8.8
- Attack vector
- Adjacent network
- Complexity
- Low
- Privileges needed
- None
- User interaction
- None
- Scope
- Unchanged
- Confidentiality
- High
- Integrity
- High
- Availability
- High
Raw vector
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
