What’s Vulnerable › Vulnerabilities

CVE-2025-66177

• Severity: high (CVSS 8.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.3% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2026-01-13 · updated 2026-07-09
• Weakness: CWE-121

Description

There is a Buffer overflow Vulnerability in the device Search and Discovery feature of Hikvision NVR/DVR/CVR/IPC models. If exploited, an attacker on the same local area network (LAN) could cause the device to malfunction by sending specially crafted packets to an unpatched device.

Affected products

• Hikvision DS-2CD1xx1: Versions below V5.7.23_241015 (including V5.7.23_241015)
• Hikvision DS-2CD1xxxG0(T): Versions below V5.7.23_241015 (including V5.7.23_241015)
• Hikvision DS-2CD1xxxG2: Versions below V5.7.13_230822 (including V5.7.13_230822)
• Hikvision DS-2CD29xxG0: Versions below V5.7.21_240814 (including V5.7.21_240814)
• Hikvision DS-2CD2Dx5G1: Versions below V5.7.210_240826 (including V5.7.210_240826)
• Hikvision DS-2CD2xx1G0: Versions below V5.7.23_241015 (including V5.7.23_241015)
• Hikvision DS-2CD3xx1G0: Versions below V5.7.23_241015 (including V5.7.23_241015)
• Hikvision DS-2CD3xx1G2: Versions below V5.7.13_230822 (including V5.7.13_230822)
• Hikvision DS-2CD64x5G1: Versions below V5.7.210_240826 (including V5.7.210_240826)
• Hikvision DS-2XC6xxxG0: Versions below V5.7.7build241203 (including V5.7.7build241203)
• Hikvision DS-2XE6xxxG0: Versions below V5.7.7build241203 (including V5.7.7build241203)
• Hikvision DS-710xNI-G1/(xP)/M: Build date before 250807
• Hikvision DS-71xxHGHI-M1(/T): Build date before 250807
• Hikvision DS-71xxNI-Q1(/xP): Build date before 250807
• Hikvision DS-71xxNI-Q1(/xP)/M: Build date before 250807
• Hikvision DS-72xxHGHI-M1(/T): Build date before 250807
• Hikvision DS-76xxNI-Mx: Build date before 250807
• Hikvision DS-76xxNI-Q1(/xP): Build date before 250807
• Hikvision DS-76xxNI-Q2(/xP): Build date before 250807
• Hikvision DS-76xxNI-Qx(/xP) including(D)、(E): Build date before 250807
• Hikvision DS-76xxNXI-Ix/S: Build date before 250807
• Hikvision DS-76xxNXI-Ix/VPro: Build date before 250807
• Hikvision DS-76xxNXI-K1(/xP): Build date before 250807
• Hikvision DS-76xxNXI-K1(/xP)/VPro: Build date before 250807
• Hikvision DS-76xxNXI-K2(/xP): Build date before 250807
• Hikvision DS-76xxNXI-K2(/xP)/VPro: Build date before 250807
• Hikvision DS-76xxNXI-Kx(/xP) including(D)、(E)、(B): Build date before 250807
• Hikvision DS-76xxNXI-Kx(/xP)/Vpro: Build date before 250807
• Hikvision DS-76xxNXI-Mx/VPro: Build date before 250807
• Hikvision DS-77xxNI-Mx: Build date before 250807

References

• https://www.hikvision.com/en/support/cybersecurity/security-advisory/buffer-overflow-vulnerabilities-in-some-hikvision-products/

Get alerted when CVE-2025-66177 or the next vulnerability affects your stack