NetSight
high8.8

CVE-2025-66176

There is a Buffer overflow Vulnerability in the device Search and Discovery feature of Hikvision Access Control Products.

Impact

There is a Buffer overflow Vulnerability in the device Search and Discovery feature of Hikvision Access Control Products. If exploited, an attacker on the same local area network (LAN) could cause the device to malfunction by sending specially crafted packets to an unpatched device.

Affected products

VendorProductAffected versions
HikvisionDs-K1t331 Firmware
before 3.7.80
HikvisionDs-K1t341a Firmware
before 3.7.80
HikvisionDs-K1t341b Firmware
before 3.7.80
HikvisionDs-K1t671 Firmware
before 3.7.80
HikvisionDs-K5671 Firmware
before 3.7.80
HikvisionDs-K1t672 Firmware
before 3.7.80
HikvisionDs-K1t680 Firmware
before 3.7.80
HikvisionDs-K1t981 Firmware
before 3.7.80
HikvisionDs-K1t341c Firmware
before 3.3.180
HikvisionDs-K1t670 Firmware
before 4.48.0
HikvisionDs-K1t673 Firmware
before 4.48.0
HikvisionDs-K1t8003 Firmware
through 1.4.21

Weakness classification

References