CVE-2025-66176

There is a Buffer overflow Vulnerability in the device Search and Discovery feature of Hikvision Access Control Products

High · published January 13, 2026

CVSS v3.1
8.8
EPSS
0%
Percentile
39.5
In the wild
Unconfirmed
What it is

⚡ A wild buffer overflow vulnerability is lurking in Hikvision's Access Control products! An attacker on the local network could send crafted packets that push the device's limits and cause it to malfunction. 🚨 Think of it like overfilling a balloon with air; eventually, it will burst! In this case, the device stumbles under the pressure of unexpected data, leading to operational chaos. If exploited, an attacker could potentially disrupt the device's functionality, rendering it useless and leaving your access control in jeopardy. This could lead to unauthorized access or denial of service, making it a serious risk to your security infrastructure.

Put simply

Think of it like overfilling a balloon with air; eventually, it will burst! In this case, the device stumbles under the pressure of unexpected data, leading to operational chaos. This vulnerability is a buffer overflow in the Search and Discovery feature, allowing attackers on the same local area network to crash the device by sending specially crafted packets that exceed the expected data limits.

What to do

If exploited, an attacker could potentially disrupt the device's functionality, rendering it useless and leaving your access control in jeopardy. This could lead to unauthorized access or denial of service, making it a serious risk to your security infrastructure. To mitigate this risk, immediately apply the latest firmware update from Hikvision and ensure all devices on your network are patched. Regularly audit your device configurations and limit network access to trusted users only. You've got this! Stay proactive and secure your devices for peace of mind. 🛡️

The record
Technical detail
CVSS v3.1
8.8 · HIGH
Vector
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00468 · 39.5th percentile
Published
2026-01-13T01:47Z
EPSS history
Timeline
  • 13 JAN 01:47Z
    There is a Buffer overflow Vulnerability in the device Search and Discovery feature of Hikvision Access Control Products
    cvelistv5