Vulnerability · Published Jan 13, 2026 · Assigned by hikvision
CVE-2025-66177
High 8.8
In plain English
A high-severity stack buffer overflow in DS-710xNI-G1/(xP)/M from Hikvision. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.3% (higher than 28% of all known vulnerabilities). Ready-made attack tooling exists: public proof-of-concept code.
Severity (CVSS 3.1)8.8High
Exploit odds (30 days)0.3%top 71.8% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack tooling1Public PoC
Official description
There is a Buffer overflow Vulnerability in the device Search and Discovery feature of Hikvision NVR/DVR/CVR/IPC models. If exploited, an attacker on the same local area network (LAN) could cause the device to malfunction by sending specially crafted packets to an unpatched device.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Hikvision | DS-96xxxNI-Hx | Build date before 250807 |
| Hikvision | DS-96xxxNI-Ix | Build date before 250807 |
| Hikvision | DS-96xxNXI-Sx | Build date before 250807 |
| Hikvision | DS-96xxxNXI-Sx | Build date before 250807 |
| Hikvision | DS-76xxNXI-Mx/VPro | Build date before 250807 |
| Hikvision | DS-96xxNXI-Mx/VPro | Build date before 250807 |
| Hikvision | DS-76xxNI-Mx | Build date before 250807 |
| Hikvision | DS-77xxNI-Mx | Build date before 250807 |
| Hikvision | DS-96xxNXI-Mx | Build date before 250807 |
| Hikvision | DS-96xxxNXI-Mx | Build date before 250807 |
| Hikvision | DS-86xxxNXI-Mx | Build date before 250807 |
| Hikvision | DS-76xxNXI-Ix/S | Build date before 250807 |
| Hikvision | DS-77xxNXI-Ix/S | Build date before 250807 |
| Hikvision | DS-86xxNXI-Ix/S | Build date before 250807 |
| Hikvision | DS-96xxNXI-Ix/S | Build date before 250807 |
| Hikvision | DS-76xxNXI-Ix/VPro | Build date before 250807 |
| Hikvision | DS-77xxNXI-Ix/VPro | Build date before 250807 |
| Hikvision | DS-76xxNXI-Kx(/xP) including(D)、(E)、(B) | Build date before 250807 |
| Hikvision | DS-77xxNXI-Kx(/xP) including(D)、(E)、(B) | Build date before 250807 |
| Hikvision | DS-76xxNXI-Kx(/xP)/Vpro | Build date before 250807 |
| Hikvision | DS-77xxNXI-Kx(/xP)/Vpro | Build date before 250807 |
| Hikvision | DS-76xxNI-Qx(/xP) including(D)、(E) | Build date before 250807 |
| Hikvision | DS-71xxNI-Q1(/xP)/M | Build date before 250807 |
| Hikvision | DS-71xxNI-Q1(/xP) | Build date before 250807 |
| Hikvision | DS-710xNI-G1/(xP)/M | Build date before 250807 |
| Hikvision | DS-71xxNI-Q1(/xP) | Build date before 250807 |
| Hikvision | DS-71xxNI-Q1(/xP)/M | Build date before 250807 |
| Hikvision | DS-76xxNI-Q1(/xP) | Build date before 250807 |
| Hikvision | DS-76xxNI-Q2(/xP) | Build date before 250807 |
| Hikvision | DS-76xxNXI-K1(/xP) | Build date before 250807 |
Weakness: CWE-121 · Vector: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H