CameraRisk

CVE-2025-66176

Hikvision

Published
13 January 2026
Last modified
9 July 2026
CVSS
8.8 v3.1
Severity
high
EPSS
0.5% (40th pct)
CISA KEV
Not listed
NVD status
Modified
Weaknesses
CWE-121

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Description

There is a Buffer overflow Vulnerability in the device Search and Discovery feature of Hikvision Access Control Products. If exploited, an attacker on the same local area network (LAN) could cause the device to malfunction by sending specially crafted packets to an unpatched device.

Exploitation

Not listed in the CISA Known Exploited Vulnerabilities catalogue as of 2026.09.04. That is an absence of confirmed public exploitation, not evidence that exploitation has not occurred. EPSS models a 0.5% probability of exploitation activity in the next 30 days.

Affected products

ProductVendorTypeVersions named
Ds-k1t105a Hikvision unknown < 1.3.65
Ds-k1t201a Hikvision unknown < 1.3.65
Ds-k1t320 Hikvision unknown < 3.9.40
Ds-k1t321 Hikvision unknown < 3.9.40
Ds-k1t323 Hikvision unknown < 4.23.41
Ds-k1t331 Hikvision unknown < 3.7.80
Ds-k1t341a Hikvision unknown < 3.7.80
Ds-k1t341b Hikvision unknown < 3.7.80
Ds-k1t341c Hikvision unknown < 3.3.180, <= 3.3.8_build230112
Ds-k1t342 Hikvision unknown < 4.48.0
Ds-k1t343 Hikvision unknown < 4.48.0
Ds-k1t344 Hikvision unknown < 4.48.0
Ds-k1t510 Hikvision unknown < 4.23.41
Ds-k1t670 Hikvision unknown < 4.48.0
Ds-k1t671 Hikvision unknown < 3.7.80, <= 3.2.30_build221223
Ds-k1t672 Hikvision unknown < 3.7.80
Ds-k1t673 Hikvision unknown < 4.48.0
Ds-k1t680 Hikvision unknown < 3.7.80
Ds-k1t6qt-f43 Hikvision unknown < 4.48.0
Ds-k1t6qt-f72 Hikvision unknown < 4.48.0
Ds-k1t8003 Hikvision unknown <= 1.4.21
Ds-k1t8005 Hikvision unknown < 3.25.40
Ds-k1t804a Hikvision unknown < 1.4.22
Ds-k1t804b Hikvision unknown < 1.4.23
Ds-k1t808 Hikvision unknown < 3.25.40
Ds-k1t981 Hikvision unknown < 3.7.80
Ds-k5033 Hikvision unknown < 4.37.40
Ds-k5671 Hikvision unknown < 3.7.80

References

Vendor advisory and patch

CVE-2025-66176 at NVD

Record assembled from NVD, CISA KEV 2026.09.04 and FIRST EPSS 2026-09-04. Affected products are those NVD's CPE configuration names that fall inside this site's scope; a CVE may affect products outside it.