Vulnerability Report

CVE-2025-66177

Title: Stack Overflow in Hikvision NVR/DVR/CVR/IPC

Memory Corruption

Proof Of Concept

PoC Available for CVE-2025-66177

CWE Category NVD-CWE-noinfo

Published Date Jan 13, 2026

Modified Date Apr 15, 2026

Exploit Status Available

Score 8.8 CVSS v3.1

Exploit Probability (EPSS)

0.32%

Vulnerability Summary

CVE-2025-66177: There is a Stack overflow Vulnerability in the device Search and Discovery feature of Hikvision NVR/DVR/CVR/IPC models. If exploited, an attacker on the same local area network (LAN) could cause the device to malfunction by sending specially crafted packets to an unpatched device.

Impacted Vendors

Analysis in Progress...

Reference Links

https://www.hikvision.com/en/support/cybersecurity/security-advisory/buffer-overflow-vulnerabilities-in-some-hikvision-products/

CVSS v3.1

Source Entity [email protected]

Severity HIGH

8.8

Attack Vector

ADJACENT_NETWORK

Complexity

LOW

Privileges

N/A

Interaction

NONE

Confidentiality

N/A

Integrity

N/A

Availability

N/A

Scope

UNCHANGED

RAW VECTOR CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Associated Attack Patterns (CAPEC)

Total: Patterns