CVE-2025-66177
HIGH 8.8EPSS 0.3%
There is a Buffer overflow Vulnerability in the device Search and Discovery feature of Hikvision NVR/DVR/CVR/IPC models. If exploited, an attacker on the same local area network (LAN) could cause the device to malfunction by sending specially crafted packets to an unpatched device.
- Affected
- Hikvision · DS-96xxxNI-Hx · DS-96xxxNI-Ix · DS-96xxNXI-Sx · DS-96xxxNXI-Sx · DS-76xxNXI-Mx/VPro · DS-96xxNXI-Mx/VPro
- CVSS v3.1 HIKVISION
- 8.8 HIGH
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - EPSS
- 0.34% chance of exploitation in the next 30 days, 27th percentile
- Published
- 2026-01-13
- Updated
- 2026-07-09
Proof-of-concept exploits (1)
- ang3lL/CVE-2025-661773★ · 2026-05-24