What’s Vulnerable › Vulnerabilities

CVE-2025-66176

• Severity: high (CVSS 8.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.5% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2026-01-13 · updated 2026-07-09
• Weakness: CWE-121

Description

There is a Buffer overflow Vulnerability in the device Search and Discovery feature of Hikvision Access Control Products. If exploited, an attacker on the same local area network (LAN) could cause the device to malfunction by sending specially crafted packets to an unpatched device.

Affected products

• Hikvision Ds-K1T105A Firmware: before 1.3.65 — fixed in 1.3.65
• Hikvision Ds-K1T201A Firmware: before 1.3.65 — fixed in 1.3.65
• Hikvision Ds-K1T320 Firmware: before 3.9.40 — fixed in 3.9.40
• Hikvision Ds-K1T321 Firmware: before 3.9.40 — fixed in 3.9.40
• Hikvision Ds-K1T323 Firmware: before 4.23.41 — fixed in 4.23.41
• Hikvision Ds-K1T331 Firmware: before 3.7.80 — fixed in 3.7.80
• Hikvision Ds-K1T341A Firmware: before 3.7.80 — fixed in 3.7.80
• Hikvision Ds-K1T341B Firmware: before 3.7.80 — fixed in 3.7.80
• Hikvision Ds-K1T341C Firmware: before 3.3.180 — fixed in 3.3.180
• Hikvision Ds-K1T342 Firmware: before 4.48.0 — fixed in 4.48.0
• Hikvision Ds-K1T343 Firmware: before 4.48.0 — fixed in 4.48.0
• Hikvision Ds-K1T344 Firmware: before 4.48.0 — fixed in 4.48.0
• Hikvision Ds-K1T510 Firmware: before 4.23.41 — fixed in 4.23.41
• Hikvision Ds-K1T670 Firmware: before 4.48.0 — fixed in 4.48.0
• Hikvision Ds-K1T671 Firmware: before 3.7.80 — fixed in 3.7.80
• Hikvision Ds-K1T672 Firmware: before 3.7.80 — fixed in 3.7.80
• Hikvision Ds-K1T673 Firmware: before 4.48.0 — fixed in 4.48.0
• Hikvision Ds-K1T680 Firmware: before 3.7.80 — fixed in 3.7.80
• Hikvision Ds-K1T6Qt-F43 Firmware: before 4.48.0 — fixed in 4.48.0
• Hikvision Ds-K1T6Qt-F72 Firmware: before 4.48.0 — fixed in 4.48.0
• Hikvision Ds-K1T8003 Firmware: through 1.4.21
• Hikvision Ds-K1T8005 Firmware: before 3.25.40 — fixed in 3.25.40
• Hikvision Ds-K1T804A Firmware: before 1.4.22 — fixed in 1.4.22
• Hikvision Ds-K1T804B Firmware: before 1.4.23 — fixed in 1.4.23
• Hikvision Ds-K1T808 Firmware: before 3.25.40 — fixed in 3.25.40
• Hikvision Ds-K1T981 Firmware: before 3.7.80 — fixed in 3.7.80
• Hikvision Ds-K5033 Firmware: before 4.37.40 — fixed in 4.37.40
• Hikvision Ds-K5671 Firmware: before 3.7.80 — fixed in 3.7.80

How to fix

Upgrade to a fixed version: Hikvision Ds-K1T105A Firmware 1.3.65; Hikvision Ds-K1T201A Firmware 1.3.65; Hikvision Ds-K1T320 Firmware 3.9.40; Hikvision Ds-K1T321 Firmware 3.9.40; Hikvision Ds-K1T323 Firmware 4.23.41; Hikvision Ds-K1T331 Firmware 3.7.80; Hikvision Ds-K1T341A Firmware 3.7.80; Hikvision Ds-K1T341B Firmware 3.7.80; Hikvision Ds-K1T341C Firmware 3.3.180; Hikvision Ds-K1T342 Firmware 4.48.0; Hikvision Ds-K1T343 Firmware 4.48.0; Hikvision Ds-K1T344 Firmware 4.48.0. Check the vendor advisory for mitigations.

References

• https://www.hikvision.com/en/support/cybersecurity/security-advisory/buffer-overflow-vulnerabilities-in-some-hikvision-products/
• https://www.talosintelligence.com/vulnerability_reports/TALOS-2025-2281

Get alerted when CVE-2025-66176 or the next vulnerability affects your stack