CVE-2025-66177 
There is a Stack overflow Vulnerability in the device Search and Discovery feature of Hikvision NVR/DVR/CVR/IPC models. If exploited, an attacker on the same local area network (LAN) could cause the device to malfunction by sending specially crafted packets to an unpatched device.
Affected products: vendor: Hikvision
product: DS-96xxxNI-Hx
vendor: Hikvision
product: DS-96xxxNI-Ix
vendor: Hikvision
product: DS-96xxNXI-Sx
vendor: Hikvision
product: DS-96xxxNXI-Sx
vendor: Hikvision
product: DS-76xxNXI-Mx/VPro
vendor: Hikvision
product: DS-96xxNXI-Mx/VPro
vendor: Hikvision
product: DS-76xxNI-Mx
vendor: Hikvision
product: DS-77xxNI-Mx
vendor: Hikvision
product: DS-96xxNXI-Mx
vendor: Hikvision
product: DS-96xxxNXI-Mx
vendor: Hikvision
product: DS-86xxxNXI-Mx
vendor: Hikvision
product: DS-76xxNXI-Ix/S
vendor: Hikvision
product: DS-77xxNXI-Ix/S
vendor: Hikvision
product: DS-86xxNXI-Ix/S
vendor: Hikvision
product: DS-96xxNXI-Ix/S
vendor: Hikvision
product: DS-76xxNXI-Ix/VPro
vendor: Hikvision
product: DS-77xxNXI-Ix/VPro
vendor: Hikvision
product: DS-76xxNXI-Kx(/xP)  including(D)、(E)、(B)
vendor: Hikvision
product: DS-77xxNXI-Kx(/xP) including(D)、(E)、(B)
vendor: Hikvision
product: DS-76xxNXI-Kx(/xP)/Vpro
vendor: Hikvision
product: DS-77xxNXI-Kx(/xP)/Vpro
vendor: Hikvision
product: DS-76xxNI-Qx(/xP)   including(D)、(E)
vendor: Hikvision
product: DS-71xxNI-Q1(/xP)/M
vendor: Hikvision
product: DS-71xxNI-Q1(/xP)
vendor: Hikvision
product: DS-710xNI-G1/(xP)/M
vendor: Hikvision
product: DS-71xxNI-Q1(/xP)
vendor: Hikvision
product: DS-71xxNI-Q1(/xP)/M
vendor: Hikvision
product: DS-76xxNI-Q1(/xP)
vendor: Hikvision
product: DS-76xxNI-Q2(/xP)
vendor: Hikvision
product: DS-76xxNXI-K1(/xP)
vendor: Hikvision
product: DS-76xxNXI-K2(/xP)
vendor: Hikvision
product: DS-77xxNXI-K4(/xP)
vendor: Hikvision
product: DS-86xxNXI-K8(/xP)
vendor: Hikvision
product: DS-76xxNXI-K1(/xP)/VPro
vendor: Hikvision
product: DS-76xxNXI-K2(/xP)/VPro
vendor: Hikvision
product: DS-77xxNXI-K4(/xP)/VPro
vendor: Hikvision
product: iDS-71xxHGHI-M1(/T)
vendor: Hikvision
product: iDS-72xxHGHI-M1(/T)
vendor: Hikvision
product: iDS-71xxHQHI-M1(/T)
vendor: Hikvision
product: iDS-72xxHQHI-M1(/T)
vendor: Hikvision
product: iDS-72xxHQHI-Mx/XT
vendor: Hikvision
product: iDS-72xxHUHI-Mx/XT
vendor: Hikvision
product: iDS-72xxHTHI-Mx/XT
vendor: Hikvision
product: iDS-90xxHUHI-M8/S(S)
vendor: Hikvision
product: iDS-73xxHUHI-M4/S(S)
vendor: Hikvision
product: iDS-81xxHUHI-M8/S(S)
vendor: Hikvision
product: DS-71xxHGHI-M1(/T)
vendor: Hikvision
product: DS-72xxHGHI-M1(/T)
vendor: Hikvision
product: DS-ExxHGHI-xx
vendor: Hikvision
product: iDS-71xxHQHI-M1/S
vendor: Hikvision
product: iDS-72xxHQHI-M1/E
vendor: Hikvision
product: iDS-71xxHQHI-M1/T
vendor: Hikvision
product: iDS-72xxHQHI-M1/T
vendor: Hikvision
product: iDS-72xxHQHI-Mx/XT
vendor: Hikvision
product: iDS-73xxHQHI-M4/S
vendor: Hikvision
product: iDS-81xxHQHI-M8/S
vendor: Hikvision
product: iDS-90xxHQHI-M8/S
vendor: Hikvision
product: iDS-ExxHQHI-xx
vendor: Hikvision
product: iDS-71xxHUHI-M1/S
vendor: Hikvision
product: iDS-72xxHUHI-M1/E
vendor: Hikvision
product: iDS-72xxHUHI-M1/T
vendor: Hikvision
product: iDS-72xxHUHI-Mx/X
vendor: Hikvision
product: iDS-72xxHUHI-Mx/XT
vendor: Hikvision
product: iDS-72xxHUHI-Mx/PXT
vendor: Hikvision
product: iDS-73xxHUHI-M4/S
vendor: Hikvision
product: iDS-90xxHUHI-M8/S
vendor: Hikvision
product: iDS-ExxHUHI-xx
vendor: Hikvision
product: iDS-72xxHTHI-Mx/XT
vendor: Hikvision
product: DS-A806xxSI
vendor: Hikvision
product: DS-AT1000SI
vendor: Hikvision
product: iDS-96xxxNXI-Hx
vendor: Hikvision
product: iDS-96064NXI-I16
vendor: Hikvision
product: iDS-96xxxNXI-Ix/AI
vendor: Hikvision
product: iDS-67xxNXI-Mx/X
vendor: Hikvision
product: iDS-76xxNXI-Mx/X
vendor: Hikvision
product: iDS-77xxNXI-Mx/X
vendor: Hikvision
product: iDS-96xxNXI-Mx/X
vendor: Hikvision
product: iDS-96xxxNXI-Mx/X
vendor: Hikvision
product: iDS-96xxxNXI-Hx/AI
vendor: Hikvision
product: iDS-96xxNXI-Mx/AI
vendor: Hikvision
product: iDS-67xxNXI-Mx/AI
vendor: Hikvision
product: iDS-67xxxNXI-Mx/AI
vendor: Hikvision
product: iDS-67xxNXI-S/T
vendor: Hikvision
product: iDS-67xxNXI-S
vendor: Hikvision
product: iDS-6704NXI/AI
vendor: Hikvision
product: iDS-67xxNXI-P1
vendor: Hikvision
product: iDS-7608NXI-P2
vendor: Hikvision
product: iDS-77xxNXI-P4
vendor: Hikvision
product: iDS-96xxNXI-Px
vendor: Hikvision
product: DS-2CD1xxxG2
vendor: Hikvision
product: DS-2CD3xx1G2
vendor: Hikvision
product: HWI-xxxxHA
vendor: Hikvision
product: IPC-xxxxHA
vendor: Hikvision
product: DS-2CD2Dx5G1
vendor: Hikvision
product: DS-2CD64x5G1
vendor: Hikvision
product: DS-2CD29xxG0
vendor: Hikvision
product: DS-2XE6xxxG0
vendor: Hikvision
product: DS-2XC6xxxG0
vendor: Hikvision
product: DS-2CD1xxxG0(T)
vendor: Hikvision
product: DS-2CD1xx1
vendor: Hikvision
product: DS-2CD3xx1G0
vendor: Hikvision
product: DS-2CD2xx1G0
vendor: Hikvision
product: IPC-xxxxH
vendor: Hikvision
product: HWI-xxxH(C)
CVSS v3.1: version: 3.1
attackVector: ADJACENT_NETWORK
attackComplexity: LOW
privilegesRequired: NONE
userInteraction: NONE
scope: UNCHANGED
confidentialityImpact: HIGH
integrityImpact: HIGH
availabilityImpact: HIGH
baseScore: 8.8
baseSeverity: HIGH
vectorString: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Credits: lang: en
value: Angel Lozano Alcazar
lang: en
value: Pedro Guillen Nuñez
Published: 2026-01-13T01:47:54.031Z