Back to CVE records
High 8.8Published Jan 12, 2026
CVE-2025-66176There is a Buffer overflow Vulnerability in the device Search and Discovery feature of Hikvision Access Control Products.
Updated under an hour ago ()
Does this affect you?
It affects Hikvision DS-K1T331 and 45 other products. Add what you run to find out whether that includes you.
No exploitation reported and no EPSS estimate yet.
Do this next
Start free and add your stack
Free account, 1 product
There is a Buffer overflow Vulnerability in the device Search and Discovery feature of Hikvision Access Control Products. If exploited, an attacker on the same local area network (LAN) could cause the device to malfunction by sending specially crafted packets to an unpatched device.
- CVSS
- 8.8 HIGH (v3.1, CNA)CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
- Weakness (CWE)
- CWE-121
- Known exploited
- Not in CISA's KEV catalog
- EPSS (exploitation in the next 30 days)
- Not loaded for this CVE
- Assigned by
- hikvision
- NVD analysis
- Modified
- Record last updated
- Jul 9, 2026
- First seen by InfoSec Signals
- Oct 9, 2026
Affected products
Hikvision DS-K1T331 hikvision:ds_k1t331 (from the name) | Versions below V3.7.80 | CNA record |
Hikvision DS-K1T341A/K1T341B hikvision:ds_k1t341a_k1t341b (from the name) | Versions below V3.7.80 | CNA record |
Hikvision DS-K1T671/K5671 hikvision:ds_k1t671_k5671 (from the name) | Versions below V3.7.80 | CNA record |
Hikvision DS-K1T672 hikvision:ds_k1t672 (from the name) | Versions below V3.7.80 | CNA record |
Hikvision DS-K1T680 hikvision:ds_k1t680 (from the name) | Versions below V3.7.80 | CNA record |
Hikvision DS-K1T981 hikvision:ds_k1t981 (from the name) | Versions below V3.7.80 | CNA record |
Hikvision DS-K1T341C hikvision:ds_k1t341c (from the name) | Versions below V3.3.180 | CNA record |
Hikvision DS-K1T670/K1T673 hikvision:ds_k1t670_k1t673 (from the name) | Versions below V4.48.0 | CNA record |
Hikvision DS-K1T8003 hikvision:ds_k1t8003 (from the name) | Versions below V1.4.21 | CNA record |
Hikvision DS-K1T804A hikvision:ds_k1t804a (from the name) | Versions below V1.4.22 | CNA record |
Hikvision DS-K1T8003/8004 hikvision:ds_k1t8003_8004 (from the name) | Versions below V1.4.21 | CNA record |
Hikvision DS-K1T804B hikvision:ds_k1t804b (from the name) | Versions below V1.4.23 | CNA record |
Hikvision DS-K1T201A/K1T105A hikvision:ds_k1t201a_k1t105a (from the name) | Versions below V1.3.65 | CNA record |
Hikvision DS-K1T342/K1T343/K1T344/DS-K1T6QT-F72/F43 hikvision:ds_k1t342_k1t343_k1t344_ds_k1t6qt_f72_f43 (from the name) | Versions below V4.48.0 | CNA record |
Hikvision DS-K1T8005/DS-K1T808 hikvision:ds_k1t8005_ds_k1t808 (from the name) | Versions below V3.25.40 | CNA record |
Hikvision DS-K1T320/DS-K1T321 hikvision:ds_k1t320_ds_k1t321 (from the name) | Versions below V3.9.40 | CNA record |
Hikvision DS-K1T323/DS-K1T510 hikvision:ds_k1t323_ds_k1t510 (from the name) | Versions below V4.23.41 | CNA record |
Hikvision DS-K5033 hikvision:ds_k5033 (from the name) | Versions below V4.37.40 | CNA record |
hikvision ds-k1t331_firmware hikvision:ds-k1t331_firmware | before 3.7.80 | NVD |
hikvision ds-k1t341a_firmware hikvision:ds-k1t341a_firmware | before 3.7.80 | NVD |
hikvision ds-k1t341b_firmware hikvision:ds-k1t341b_firmware | before 3.7.80 | NVD |
hikvision ds-k1t671_firmware hikvision:ds-k1t671_firmware | before 3.7.80 | NVD |
hikvision ds-k5671_firmware hikvision:ds-k5671_firmware | before 3.7.80 | NVD |
hikvision ds-k1t672_firmware hikvision:ds-k1t672_firmware | before 3.7.80 | NVD |
hikvision ds-k1t680_firmware hikvision:ds-k1t680_firmware | before 3.7.80 | NVD |
hikvision ds-k1t981_firmware hikvision:ds-k1t981_firmware | before 3.7.80 | NVD |
hikvision ds-k1t341c_firmware hikvision:ds-k1t341c_firmware | before 3.3.180 | NVD |
hikvision ds-k1t670_firmware hikvision:ds-k1t670_firmware | before 4.48.0 | NVD |
hikvision ds-k1t673_firmware hikvision:ds-k1t673_firmware | before 4.48.0 | NVD |
hikvision ds-k1t8003_firmware hikvision:ds-k1t8003_firmware | through 1.4.21 | NVD |
hikvision ds-k1t804a_firmware hikvision:ds-k1t804a_firmware | before 1.4.22 | NVD |
hikvision ds-k1t804b_firmware hikvision:ds-k1t804b_firmware | before 1.4.23 | NVD |
hikvision ds-k1t201a_firmware hikvision:ds-k1t201a_firmware | before 1.3.65 | NVD |
hikvision ds-k1t105a_firmware hikvision:ds-k1t105a_firmware | before 1.3.65 | NVD |
hikvision ds-k1t342_firmware hikvision:ds-k1t342_firmware | before 4.48.0 | NVD |
hikvision ds-k1t343_firmware hikvision:ds-k1t343_firmware | before 4.48.0 | NVD |
hikvision ds-k1t344_firmware hikvision:ds-k1t344_firmware | before 4.48.0 | NVD |
hikvision ds-k1t6qt-f72_firmware hikvision:ds-k1t6qt-f72_firmware | before 4.48.0 | NVD |
hikvision ds-k1t6qt-f43_firmware hikvision:ds-k1t6qt-f43_firmware | before 4.48.0 | NVD |
hikvision ds-k1t8005_firmware hikvision:ds-k1t8005_firmware | before 3.25.40 | NVD |
hikvision ds-k1t808_firmware hikvision:ds-k1t808_firmware | before 3.25.40 | NVD |
hikvision ds-k1t320_firmware hikvision:ds-k1t320_firmware | before 3.9.40 | NVD |
hikvision ds-k1t321_firmware hikvision:ds-k1t321_firmware | before 3.9.40 | NVD |
hikvision ds-k1t323_firmware hikvision:ds-k1t323_firmware | before 4.23.41 | NVD |
hikvision ds-k1t510_firmware hikvision:ds-k1t510_firmware | before 4.23.41 | NVD |
hikvision ds-k5033_firmware hikvision:ds-k5033_firmware | before 4.37.40 | NVD |
References
- https://www.hikvision.com/en/support/cybersecurity/security-advisory/buffer-overflow-vulnerabilities-in-some-hikvision-products/vendor-advisory
- https://www.talosintelligence.com/vulnerability_reports/TALOS-2025-2281
The CVE record on cve.org NVD's entry
The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.