{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2025-66176", "assignerOrgId": "da451dce-859b-4e51-8b87-9c8b60d19b32", "state": "PUBLISHED", "assignerShortName": "hikvision", "dateReserved": "2025-11-24T08:59:35.903Z", "datePublished": "2026-01-13T01:47:27.191Z", "dateUpdated": "2026-03-18T15:28:09.433Z"}, "containers": {"cna": {"descriptions": [{"lang": "en", "value": "There is a Stack overflow Vulnerability in the device Search and Discovery feature of Hikvision Access Control Products. If exploited, an attacker on the same local area network (LAN) could cause the device to malfunction by sending specially crafted packets to an unpatched device."}], "affected": [{"vendor": "Hikvision", "product": "DS-K1T331", "versions": [{"version": "Versions below V3.7.80", "status": "affected"}]}, {"vendor": "Hikvision", "product": "DS-K1T341A/K1T341B", "versions": [{"version": "Versions below V3.7.80", "status": "affected"}]}, {"vendor": "Hikvision", "product": "DS-K1T671/K5671", "versions": [{"version": "Versions below V3.7.80", "status": "affected"}]}, {"vendor": "Hikvision", "product": "DS-K1T672", "versions": [{"version": "Versions below V3.7.80", "status": "affected"}]}, {"vendor": "Hikvision", "product": "DS-K1T680", "versions": [{"version": "Versions below V3.7.80", "status": "affected"}]}, {"vendor": "Hikvision", "product": "DS-K1T981", "versions": [{"version": "Versions below V3.7.80", "status": "affected"}]}, {"vendor": "Hikvision", "product": "DS-K1T341C", "versions": [{"version": "Versions below V3.3.180", "status": "affected"}]}, {"vendor": "Hikvision", "product": "DS-K1T670/K1T673", "versions": [{"version": "Versions below V4.48.0", "status": "affected"}]}, {"vendor": "Hikvision", "product": "DS-K1T8003", "versions": [{"version": "Versions below V1.4.21", "status": "affected"}]}, {"vendor": "Hikvision", "product": "DS-K1T804A", "versions": [{"version": "Versions below V1.4.22", "status": "affected"}]}, {"vendor": "Hikvision", "product": "DS-K1T8003/8004", "versions": [{"version": "Versions below V1.4.21", "status": "affected"}]}, {"vendor": "Hikvision", "product": "DS-K1T804A", "versions": [{"version": "Versions below V1.4.22", "status": "affected"}]}, {"vendor": "Hikvision", "product": "DS-K1T804B", "versions": [{"version": "Versions below V1.4.23", "status": "affected"}]}, {"vendor": "Hikvision", "product": "DS-K1T201A/K1T105A", "versions": [{"version": "Versions below V1.3.65", "status": "affected"}]}, {"vendor": "Hikvision", "product": "DS-K1T342/K1T343/K1T344/DS-K1T6QT-F72/F43", "versions": [{"version": "Versions below V4.48.0", "status": "affected"}]}, {"vendor": "Hikvision", "product": "DS-K1T8005/DS-K1T808", "versions": [{"version": "Versions below V3.25.40", "status": "affected"}]}, {"vendor": "Hikvision", "product": "DS-K1T320/DS-K1T321", "versions": [{"version": "Versions below V3.9.40", "status": "affected"}]}, {"vendor": "Hikvision", "product": "DS-K1T323/DS-K1T510", "versions": [{"version": "Versions below V4.23.41", "status": "affected"}]}, {"vendor": "Hikvision", "product": "DS-K5033", "versions": [{"version": "Versions below V4.37.40", "status": "affected"}]}], "references": [{"url": "https://www.hikvision.com/en/support/cybersecurity/security-advisory/buffer-overflow-vulnerabilities-in-some-hikvision-products/"}], "credits": [{"lang": "en", "value": "Matt Wiseman of Cisco Talos", "type": "finder"}], "metrics": [{"format": "CVSS", "scenarios": [{"lang": "en", "value": "GENERAL"}], "cvssV3_1": {"version": "3.1", "attackVector": "ADJACENT_NETWORK", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "availabilityImpact": "HIGH", "baseScore": 8.8, "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"}}], "x_generator": {"engine": "cveClient/1.0.15"}, "providerMetadata": {"orgId": "da451dce-859b-4e51-8b87-9c8b60d19b32", "shortName": "hikvision", "dateUpdated": "2026-01-15T01:56:32.572Z"}}, "adp": [{"problemTypes": [{"descriptions": [{"type": "CWE", "cweId": "CWE-121", "lang": "en", "description": "CWE-121 Stack-based Buffer Overflow"}]}], "metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2026-01-13T14:32:35.447766Z", "id": "CVE-2025-66176", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "total"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-01-13T17:28:04.643Z"}}, {"title": "CVE Program Container", "references": [{"url": "https://www.talosintelligence.com/vulnerability_reports/TALOS-2025-2281"}], "providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2026-03-18T15:28:09.433Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CVE Program Container", "references": [{"url": "https://www.talosintelligence.com/vulnerability_reports/TALOS-2025-2281"}], "providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2026-03-18T15:28:09.433Z"}}, {"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2025-66176", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "total"}], "version": "2.0.3", "timestamp": "2026-01-13T14:32:35.447766Z"}}}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-121", "description": "CWE-121 Stack-based Buffer Overflow"}]}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-01-13T14:32:38.543Z"}}], "cna": {"credits": [{"lang": "en", "type": "finder", "value": "Matt Wiseman of Cisco Talos"}], "metrics": [{"format": "CVSS", "cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 8.8, "attackVector": "ADJACENT_NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}, "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "affected": [{"vendor": "Hikvision", "product": "DS-K1T331", "versions": [{"status": "affected", "version": "Versions below V3.7.80"}]}, {"vendor": "Hikvision", "product": "DS-K1T341A/K1T341B", "versions": [{"status": "affected", "version": "Versions below V3.7.80"}]}, {"vendor": "Hikvision", "product": "DS-K1T671/K5671", "versions": [{"status": "affected", "version": "Versions below V3.7.80"}]}, {"vendor": "Hikvision", "product": "DS-K1T672", "versions": [{"status": "affected", "version": "Versions below V3.7.80"}]}, {"vendor": "Hikvision", "product": "DS-K1T680", "versions": [{"status": "affected", "version": "Versions below V3.7.80"}]}, {"vendor": "Hikvision", "product": "DS-K1T981", "versions": [{"status": "affected", "version": "Versions below V3.7.80"}]}, {"vendor": "Hikvision", "product": "DS-K1T341C", "versions": [{"status": "affected", "version": "Versions below V3.3.180"}]}, {"vendor": "Hikvision", "product": "DS-K1T670/K1T673", "versions": [{"status": "affected", "version": "Versions below V4.48.0"}]}, {"vendor": "Hikvision", "product": "DS-K1T8003", "versions": [{"status": "affected", "version": "Versions below V1.4.21"}]}, {"vendor": "Hikvision", "product": "DS-K1T804A", "versions": [{"status": "affected", "version": "Versions below V1.4.22"}]}, {"vendor": "Hikvision", "product": "DS-K1T8003/8004", "versions": [{"status": "affected", "version": "Versions below V1.4.21"}]}, {"vendor": "Hikvision", "product": "DS-K1T804A", "versions": [{"status": "affected", "version": "Versions below V1.4.22"}]}, {"vendor": "Hikvision", "product": "DS-K1T804B", "versions": [{"status": "affected", "version": "Versions below V1.4.23"}]}, {"vendor": "Hikvision", "product": "DS-K1T201A/K1T105A", "versions": [{"status": "affected", "version": "Versions below V1.3.65"}]}, {"vendor": "Hikvision", "product": "DS-K1T342/K1T343/K1T344/DS-K1T6QT-F72/F43", "versions": [{"status": "affected", "version": "Versions below V4.48.0"}]}, {"vendor": "Hikvision", "product": "DS-K1T8005/DS-K1T808", "versions": [{"status": "affected", "version": "Versions below V3.25.40"}]}, {"vendor": "Hikvision", "product": "DS-K1T320/DS-K1T321", "versions": [{"status": "affected", "version": "Versions below V3.9.40"}]}, {"vendor": "Hikvision", "product": "DS-K1T323/DS-K1T510", "versions": [{"status": "affected", "version": "Versions below V4.23.41"}]}, {"vendor": "Hikvision", "product": "DS-K5033", "versions": [{"status": "affected", "version": "Versions below V4.37.40"}]}], "references": [{"url": "https://www.hikvision.com/en/support/cybersecurity/security-advisory/buffer-overflow-vulnerabilities-in-some-hikvision-products/"}], "x_generator": {"engine": "cveClient/1.0.15"}, "descriptions": [{"lang": "en", "value": "There is a Stack overflow Vulnerability in the device Search and Discovery feature of Hikvision Access Control Products. If exploited, an attacker on the same local area network (LAN) could cause the device to malfunction by sending specially crafted packets to an unpatched device."}], "providerMetadata": {"orgId": "da451dce-859b-4e51-8b87-9c8b60d19b32", "shortName": "hikvision", "dateUpdated": "2026-01-15T01:56:32.572Z"}}}, "cveMetadata": {"cveId": "CVE-2025-66176", "state": "PUBLISHED", "dateUpdated": "2026-03-18T15:28:09.433Z", "dateReserved": "2025-11-24T08:59:35.903Z", "assignerOrgId": "da451dce-859b-4e51-8b87-9c8b60d19b32", "datePublished": "2026-01-13T01:47:27.191Z", "assignerShortName": "hikvision"}, "dataVersion": "5.2"}

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:hikvision:ds-k1t331_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "3FEF4CC2-2B13-4A80-8C57-68600AE9C93A", "versionEndExcluding": "3.7.80", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:hikvision:ds-k1t331:-:*:*:*:*:*:*:*", "matchCriteriaId": "9C6570A0-091A-49E4-8B04-650397FBD93D", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:hikvision:ds-k1t341a_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "0B6CAC82-004C-4919-9234-89004136537D", "versionEndExcluding": "3.7.80", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:hikvision:ds-k1t341a:-:*:*:*:*:*:*:*", "matchCriteriaId": "595B2854-FCC2-4DC9-9821-7545FE940FAC", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:hikvision:ds-k1t341b_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "BA1A7F5D-F33C-4F15-8639-30CDCD7C1455", "versionEndExcluding": "3.7.80", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:hikvision:ds-k1t341b:-:*:*:*:*:*:*:*", "matchCriteriaId": "3A7C6C26-52D1-4E9D-8448-29B78F692448", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:hikvision:ds-k1t671_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "7841DA8E-1AE6-46F6-BB86-360B8624F85D", "versionEndExcluding": "3.7.80", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:hikvision:ds-k1t671:-:*:*:*:*:*:*:*", "matchCriteriaId": "4B322AE4-4BE3-46EE-BFFD-730274270D52", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:hikvision:ds-k5671_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "9362042E-F45C-43E3-9709-3D17DE1E476A", "versionEndExcluding": "3.7.80", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:hikvision:ds-k5671:-:*:*:*:*:*:*:*", "matchCriteriaId": "33DF42F9-AA7B-4275-A0F5-6CD1C395379F", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:hikvision:ds-k1t672_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "A68F9962-7C8E-46AF-BFA2-372191D585AA", "versionEndExcluding": "3.7.80", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:hikvision:ds-k1t672:-:*:*:*:*:*:*:*", "matchCriteriaId": "58E41B4D-6601-4F72-BE90-1A119FFB3A0A", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:hikvision:ds-k1t680_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "E4F9199C-DEAD-430C-B2A7-FF493DAEB8EA", "versionEndExcluding": "3.7.80", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:hikvision:ds-k1t680:-:*:*:*:*:*:*:*", "matchCriteriaId": "9166334C-35C0-4220-AF7B-1964E32B4451", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:hikvision:ds-k1t981_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "AA7CA850-60FF-4A8D-8B48-A0F92CA3C893", "versionEndExcluding": "3.7.80", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:hikvision:ds-k1t981:-:*:*:*:*:*:*:*", "matchCriteriaId": "FF7DF3E8-F9C0-4475-B67B-DF390F6FCEA2", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:hikvision:ds-k1t341c_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "D45B0E65-1F34-432B-98F3-4BD668BFDBFB", "versionEndExcluding": "3.3.180", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:hikvision:ds-k1t341c:-:*:*:*:*:*:*:*", "matchCriteriaId": "592F9F35-4C09-4EF2-BA57-D0A2A1DD9CAD", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:hikvision:ds-k1t670_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "938D48C8-CABA-4BA8-AF8C-F3A32E9B5FF5", "versionEndExcluding": "4.48.0", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:hikvision:ds-k1t670:-:*:*:*:*:*:*:*", "matchCriteriaId": "D4DB9DCF-7203-4A56-8532-55930891BB1C", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:hikvision:ds-k1t673_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "8D8CA557-266F-415B-8470-BDD7D7082C65", "versionEndExcluding": "4.48.0", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:hikvision:ds-k1t673:-:*:*:*:*:*:*:*", "matchCriteriaId": "317F27A1-FA60-4970-B59E-FB02C81E94FE", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:hikvision:ds-k1t8003_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "807EF865-6176-4B6B-B054-53371272C007", "versionEndIncluding": "1.4.21", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:hikvision:ds-k1t8003:-:*:*:*:*:*:*:*", "matchCriteriaId": "D63B00A4-6461-49E1-812C-6A4C3134A18F", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:hikvision:ds-k1t804a_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "477FD324-96CA-4918-A757-A42AB88F99E7", "versionEndExcluding": "1.4.22", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:hikvision:ds-k1t804a:-:*:*:*:*:*:*:*", "matchCriteriaId": "5BDBE9E6-0A47-4D1E-824D-27CDD64EC9C6", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:hikvision:ds-k1t804b_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "55487C7C-A732-4572-8305-A5CEB4ABCE4F", "versionEndExcluding": "1.4.23", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:hikvision:ds-k1t804b:-:*:*:*:*:*:*:*", "matchCriteriaId": "84AEF3D6-96C3-48DB-84F4-91B15DA10AC9", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:hikvision:ds-k1t201a_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "1C291558-9518-45FD-B335-4C4B0B809689", "versionEndExcluding": "1.3.65", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:hikvision:ds-k1t201a:-:*:*:*:*:*:*:*", "matchCriteriaId": "F9AF2454-7567-404C-9034-B68D83AFE1A3", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:hikvision:ds-k1t105a_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "2BE71E15-75EB-45E2-8132-6EC4328119D8", "versionEndExcluding": "1.3.65", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:hikvision:ds-k1t105a:-:*:*:*:*:*:*:*", "matchCriteriaId": "E016D61D-1B25-4771-A309-AA644A26C877", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:hikvision:ds-k1t342_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "EF448E78-1DD8-414D-8AE3-72A259FD3FAE", "versionEndExcluding": "4.48.0", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:hikvision:ds-k1t342:-:*:*:*:*:*:*:*", "matchCriteriaId": "8A163CD9-37C7-4575-A790-982E2406A01F", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:hikvision:ds-k1t343_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "BA984C23-17E5-43B4-A9DA-F5BD4B007478", "versionEndExcluding": "4.48.0", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:hikvision:ds-k1t343:-:*:*:*:*:*:*:*", "matchCriteriaId": "AB3816C5-A0F2-47B1-9B40-A47FE1FBE053", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:hikvision:ds-k1t344_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "0D6FF3E3-D6AB-4C69-8212-38397FB5C12B", "versionEndExcluding": "4.48.0", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:hikvision:ds-k1t344:-:*:*:*:*:*:*:*", "matchCriteriaId": "52FE66AC-596D-494C-9C29-6919205ED5AC", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:hikvision:ds-k1t6qt-f72_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "F6ABABF4-81D5-452B-8CC4-924335CF31F5", "versionEndExcluding": "4.48.0", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:hikvision:ds-k1t6qt-f72:-:*:*:*:*:*:*:*", "matchCriteriaId": "4B48535B-1471-4B1C-AF8C-2F5116225F8A", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:hikvision:ds-k1t6qt-f43_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "E83C60D7-B7FB-461E-B7E2-3EB2227C4F4E", "versionEndExcluding": "4.48.0", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:hikvision:ds-k1t6qt-f43:-:*:*:*:*:*:*:*", "matchCriteriaId": "059E5A01-4633-40F9-9AA3-8F3019903835", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:hikvision:ds-k1t8005_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "557CAE23-96F3-4A21-9E0D-532E54CED359", "versionEndExcluding": "3.25.40", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:hikvision:ds-k1t8005:-:*:*:*:*:*:*:*", "matchCriteriaId": "696ED009-67B1-4D45-9AFD-BC68697A9D7A", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:hikvision:ds-k1t808_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "8D81291F-D1C6-471D-B313-BE682B1D7C2B", "versionEndExcluding": "3.25.40", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:hikvision:ds-k1t808:-:*:*:*:*:*:*:*", "matchCriteriaId": "9B365695-11F0-4D2E-B7DD-EE6D78D95061", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:hikvision:ds-k1t320_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "C08D0733-7443-442D-9625-98DF738DE421", "versionEndExcluding": "3.9.40", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:hikvision:ds-k1t320:-:*:*:*:*:*:*:*", "matchCriteriaId": "DFB55E0E-26EF-4A02-A875-0CDFC0E84494", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:hikvision:ds-k1t321_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "6E472A20-599F-4569-93CA-D0589A91C094", "versionEndExcluding": "3.9.40", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:hikvision:ds-k1t321:-:*:*:*:*:*:*:*", "matchCriteriaId": "0A726724-CA0C-4DF4-8766-DBC24CFC6298", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:hikvision:ds-k1t323_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "72A9D0A0-440A-4478-9DFF-938A78949A22", "versionEndExcluding": "4.23.41", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:hikvision:ds-k1t323:-:*:*:*:*:*:*:*", "matchCriteriaId": "4F1E2E44-BE3B-4BBA-8F99-7F825CFCCB04", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:hikvision:ds-k1t510_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "56334187-6AE7-4A35-8597-6D3F84C2595B", "versionEndExcluding": "4.23.41", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:hikvision:ds-k1t510:-:*:*:*:*:*:*:*", "matchCriteriaId": "29A292CB-0B20-4157-A1D6-B56AAA7796C1", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:hikvision:ds-k5033_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "133AA7CA-18AD-4D11-B2D7-222D8983FBEC", "versionEndExcluding": "4.37.40", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:hikvision:ds-k5033:-:*:*:*:*:*:*:*", "matchCriteriaId": "5949CA0B-49F3-4031-A636-3B634246E3AB", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}], "cveTags": [], "descriptions": [{"lang": "en", "value": "There is a Stack overflow Vulnerability in the device Search and Discovery feature of Hikvision Access Control Products. If exploited, an attacker on the same local area network (LAN) could cause the device to malfunction by sending specially crafted packets to an unpatched device."}], "id": "CVE-2025-66176", "lastModified": "2026-03-18T16:16:23.943", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "ADJACENT_NETWORK", "availabilityImpact": "HIGH", "baseScore": 8.8, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "version": "3.1"}, "exploitabilityScore": 2.8, "impactScore": 5.9, "source": "hsrc@hikvision.com", "type": "Secondary"}]}, "published": "2026-01-13T03:16:01.097", "references": [{"source": "hsrc@hikvision.com", "tags": ["Vendor Advisory"], "url": "https://www.hikvision.com/en/support/cybersecurity/security-advisory/buffer-overflow-vulnerabilities-in-some-hikvision-products/"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "https://www.talosintelligence.com/vulnerability_reports/TALOS-2025-2281"}], "sourceIdentifier": "hsrc@hikvision.com", "vulnStatus": "Modified", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-121"}], "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "type": "Secondary"}]}

{}

{"created": "2026-01-15T08:04:03.466651+00:00", "updated": "2026-01-15T08:04:03.466678+00:00", "vendors": ["hikvision", "hikvision$PRODUCT$ds-k1t201a/k1t105a", "hikvision$PRODUCT$ds-k1t320/ds-k1t321", "hikvision$PRODUCT$ds-k1t323/ds-k1t510", "hikvision$PRODUCT$ds-k1t331", "hikvision$PRODUCT$ds-k1t341a/k1t341b", "hikvision$PRODUCT$ds-k1t341c", "hikvision$PRODUCT$ds-k1t342/k1t343/k1t344/ds-k1t6qt-f72/f43", "hikvision$PRODUCT$ds-k1t670/k1t673", "hikvision$PRODUCT$ds-k1t671/k5671", "hikvision$PRODUCT$ds-k1t672", "hikvision$PRODUCT$ds-k1t680", "hikvision$PRODUCT$ds-k1t8003", "hikvision$PRODUCT$ds-k1t8003/8004", "hikvision$PRODUCT$ds-k1t8005/ds-k1t808", "hikvision$PRODUCT$ds-k1t804a", "hikvision$PRODUCT$ds-k1t804b", "hikvision$PRODUCT$ds-k1t981", "hikvision$PRODUCT$ds-k5033"]}