CVE-2025-66177

There is a Buffer overflow Vulnerability in the device Search and Discovery feature of Hikvision NVR/DVR/CVR/IPC models

High · published January 13, 2026

CVSS v3.1
8.8
EPSS
0%
Percentile
26.9
In the wild
Unconfirmed
What it is

⚡ A buffer overflow vulnerability in Hikvision's Search and Discovery feature could leave your devices vulnerable to chaos! 🎉 Think of it like a restaurant where a customer sends in an order so wild and convoluted that it completely disrupts the kitchen—now the chefs are confused and orders start to mess up! Here, an attacker can send specially crafted packets that lead to device malfunction. If exploited, this vulnerability could cause your Hikvision devices to go haywire, potentially resulting in loss of functionality or unexpected behavior on your local network. An attacker could craft these packets and send them to unpatched devices, creating a recipe for disaster!

Put simply

Think of it like a restaurant where a customer sends in an order so wild and convoluted that it completely disrupts the kitchen—now the chefs are confused and orders start to mess up! Here, an attacker can send specially crafted packets that lead to device malfunction. This buffer overflow vulnerability allows attackers on the same LAN to send specially crafted packets to Hikvision's NVR/DVR/CVR/IPC models, causing unpredictable behavior.

What to do

If exploited, this vulnerability could cause your Hikvision devices to go haywire, potentially resulting in loss of functionality or unexpected behavior on your local network. An attacker could craft these packets and send them to unpatched devices, creating a recipe for disaster! To protect your devices, ensure you apply the latest firmware patches immediately. Regularly check Hikvision's updates and consider implementing network segmentation to limit exposure. 🛡️ You've got this! Take action now and keep your devices secure! 🔒

The record
Technical detail
CVSS v3.1
8.8 · HIGH
Vector
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00345 · 26.9th percentile
Published
2026-01-13T01:47Z
EPSS history
Timeline
  • 13 JAN 01:47Z
    There is a Buffer overflow Vulnerability in the device Search and Discovery feature of Hikvision NVR/DVR/CVR/IPC models
    cvelistv5