Skip to content
Fencer Intel
high 8.8

CVE-2025-66177 json

There is a Buffer overflow Vulnerability in the device Search and Discovery feature of Hikvision NVR/DVR/CVR/IPC models.

published 9mo ago modified 4mo ago also EUVD-2026-2374

cvss
8.8
version 3.1, CNA
cisa kev
Not listed
not in CISA's catalog
epss
0.3%
EPSS 0.3% chance of exploitation in 30 days, percentile 28%
public exploits
0
none known

Summary

There is a Buffer overflow Vulnerability in the device Search and Discovery feature of Hikvision NVR/DVR/CVR/IPC models. If exploited, an attacker on the same local area network (LAN) could cause the device to malfunction by sending specially crafted packets to an unpatched device.

Is CVE-2025-66177 in your stack? Fencer shows which of your repositories are affected as soon as an advisory lands, and opens the fix as a pull request.

Check with Fencer

CISA SSVC

Exploitation
none
Automatable
no
Technical impact
total
Assessed
9mo ago

Exploit prediction

0.35% chance of exploitation in the next 30 days, higher than 28% of all scored CVEs (FIRST EPSS, 2026-11-09).

CVSS scores

assigned by version score vector
CNA 3.1 8.8 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Affected products

  • Hikvision DS-96xxxNI-Hx
  • Hikvision DS-96xxxNI-Ix
  • Hikvision DS-96xxNXI-Sx
  • Hikvision DS-96xxxNXI-Sx
  • Hikvision DS-76xxNXI-Mx/VPro
  • Hikvision DS-96xxNXI-Mx/VPro
  • Hikvision DS-76xxNI-Mx
  • Hikvision DS-77xxNI-Mx
  • Hikvision DS-96xxNXI-Mx
  • Hikvision DS-96xxxNXI-Mx
  • Hikvision DS-86xxxNXI-Mx
  • Hikvision DS-76xxNXI-Ix/S
  • Hikvision DS-77xxNXI-Ix/S
  • Hikvision DS-86xxNXI-Ix/S
  • Hikvision DS-96xxNXI-Ix/S
  • Hikvision DS-76xxNXI-Ix/VPro
  • Hikvision DS-77xxNXI-Ix/VPro
  • Hikvision DS-76xxNXI-Kx(/xP) including(D)、(E)、(B)
  • Hikvision DS-77xxNXI-Kx(/xP) including(D)、(E)、(B)
  • Hikvision DS-76xxNXI-Kx(/xP)/Vpro
  • Hikvision DS-77xxNXI-Kx(/xP)/Vpro
  • Hikvision DS-76xxNI-Qx(/xP) including(D)、(E)
  • Hikvision DS-71xxNI-Q1(/xP)/M
  • Hikvision DS-71xxNI-Q1(/xP)
  • Hikvision DS-710xNI-G1/(xP)/M
  • Hikvision DS-76xxNI-Q1(/xP)
  • Hikvision DS-76xxNI-Q2(/xP)
  • Hikvision DS-76xxNXI-K1(/xP)
  • Hikvision DS-76xxNXI-K2(/xP)
  • Hikvision DS-77xxNXI-K4(/xP)
  • Hikvision DS-86xxNXI-K8(/xP)
  • Hikvision DS-76xxNXI-K1(/xP)/VPro
  • Hikvision DS-76xxNXI-K2(/xP)/VPro
  • Hikvision DS-77xxNXI-K4(/xP)/VPro
  • Hikvision iDS-71xxHGHI-M1(/T)
  • Hikvision iDS-72xxHGHI-M1(/T)
  • Hikvision iDS-71xxHQHI-M1(/T)
  • Hikvision iDS-72xxHQHI-M1(/T)
  • Hikvision iDS-72xxHQHI-Mx/XT
  • Hikvision iDS-72xxHUHI-Mx/XT
  • Hikvision iDS-72xxHTHI-Mx/XT
  • Hikvision iDS-90xxHUHI-M8/S(S)
  • Hikvision iDS-73xxHUHI-M4/S(S)
  • Hikvision iDS-81xxHUHI-M8/S(S)
  • Hikvision DS-71xxHGHI-M1(/T)
  • Hikvision DS-72xxHGHI-M1(/T)
  • Hikvision DS-ExxHGHI-xx
  • Hikvision iDS-71xxHQHI-M1/S
  • Hikvision iDS-72xxHQHI-M1/E
  • Hikvision iDS-71xxHQHI-M1/T

Classification

Weakness
  • CWE-121 Stack-based Buffer Overflow

References

Sources

Fencer Intel keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.