CVE-2025-66176High· 8.8▾ TwilightThere is a Buffer overflow Vulnerability in the device Search and Discovery feature of Hikvision Access Control Products. If exploited, an attacker on the same local area network (LAN) could cause the device to malfunction by sending spe…
▾ Twilight zone — High severity, or a signal on a lesser flaw
impact 48.4 · likelihood 0.1 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
Exploit-prediction probability, daily snapshots since Jul 31.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via NVD
Last analysed / modified upstream
0.5%
0.5% → 0.5%
There is a Buffer overflow Vulnerability in the device Search and Discovery feature of Hikvision Access Control Products. If exploited, an attacker on the same local area network (LAN) could cause the device to malfunction by sending specially crafted packets to an unpatched device.
ds-k1t331_firmware < 3.7.80ds-k1t341a_firmware < 3.7.80ds-k1t341b_firmware < 3.7.80ds-k1t671_firmware < 3.7.80ds-k5671_firmware < 3.7.80ds-k1t672_firmware < 3.7.80ds-k1t680_firmware < 3.7.80ds-k1t981_firmware < 3.7.80ds-k1t341c_firmware < 3.3.180ds-k1t670_firmware < 4.48.0ds-k1t673_firmware < 4.48.0ds-k1t8003_firmware <= 1.4.21ds-k1t804a_firmware < 1.4.22ds-k1t804b_firmware < 1.4.23ds-k1t201a_firmware < 1.3.65ds-k1t105a_firmware < 1.3.65ds-k1t342_firmware < 4.48.0ds-k1t343_firmware < 4.48.0ds-k1t344_firmware < 4.48.0ds-k1t6qt-f72_firmware < 4.48.0ds-k1t6qt-f43_firmware < 4.48.0ds-k1t8005_firmware < 3.25.40ds-k1t808_firmware < 3.25.40ds-k1t320_firmware < 3.9.40ds-k1t321_firmware < 3.9.40ds-k1t323_firmware < 4.23.41ds-k1t510_firmware < 4.23.41ds-k5033_firmware < 4.37.40Upgrade past the affected range:
ds-k1t331_firmware 3.7.80ds-k1t341a_firmware 3.7.80ds-k1t341b_firmware 3.7.80ds-k1t671_firmware 3.7.80ds-k5671_firmware 3.7.80ds-k1t672_firmware 3.7.80ds-k1t680_firmware 3.7.80ds-k1t981_firmware 3.7.80ds-k1t341c_firmware 3.3.180ds-k1t670_firmware 4.48.0ds-k1t673_firmware 4.48.0ds-k1t804a_firmware 1.4.22ds-k1t804b_firmware 1.4.23ds-k1t201a_firmware 1.3.65ds-k1t105a_firmware 1.3.65ds-k1t342_firmware 4.48.0ds-k1t343_firmware 4.48.0ds-k1t344_firmware 4.48.0ds-k1t6qt-f72_firmware 4.48.0ds-k1t6qt-f43_firmware 4.48.0ds-k1t8005_firmware 3.25.40ds-k1t808_firmware 3.25.40ds-k1t320_firmware 3.9.40ds-k1t321_firmware 3.9.40ds-k1t323_firmware 4.23.41ds-k1t510_firmware 4.23.41ds-k5033_firmware 4.37.40Connected by shared product, vendor, weakness, or advisory.
CVE-2025-66177High· 8.8There is a Buffer overflow Vulnerability in the device Search and Discovery feature of Hikvision NVR/DVR/CVR/IPC models
CVE-2026-0719High· 8.6A flaw was identified in the NTLM authentication handling of the libsoup HTTP library, used by GNOME and other applications for network communication
CVE-2026-85544Medium· 6.1Some Hikvision intercom products utilize an immutable factory value which should be obtained from local network or physical interaction with the device within their main card, which may allow attackers to forge a legitimate main card, th…
CVE-2026-85543Medium· 4.3Some Wi-Fi series camera products have insufficient permission validation on certain interfaces, allowing authenticated low-privileged users to obtain device Wi-Fi configuration information through these interfaces.
CVE-2026-85545High· 7.1There is an Vulnerability in some HikCentral Access Control versions
CVE-2024-26010Medium· 6.7A stack-based buffer overflow vulnerability in Fortinet FortiOS 7.4.0 through 7.4.3, FortiOS 7.2.0 through 7.2.7, FortiOS 7.0.0 through 7.0.14, FortiOS 6.4 all versions, FortiOS 6.2 all versions, FortiOS 6.0 all versions, FortiPAM 1.2 al…