Skip to main content

Ds K1t105a Firmware CVE-2025-66176

HIGH
Stack-based Buffer Overflow (CWE-121)
2026-01-13 hsrc@hikvision.com
Buffer Overflow Stack Overflow Hikvision Ds K1t105a Firmware Ds K1t201a Firmware Ds K1t320 Firmware Ds K1t321 Firmware Ds K1t323 Firmware Ds K1t331 Firmware Ds K1t341a Firmware Ds K1t341b Firmware Ds K1t341c Firmware Ds K1t342 Firmware Ds K1t343 Firmware Ds K1t344 Firmware Ds K1t510 Firmware Ds K1t670 Firmware Ds K1t671 Firmware Ds K1t672 Firmware Ds K1t673 Firmware Ds K1t680 Firmware Ds K1t6qt F43 Firmware Ds K1t6qt F72 Firmware Ds K1t8003 Firmware Ds K1t8005 Firmware Ds K1t804a Firmware Ds K1t804b Firmware Ds K1t808 Firmware Ds K1t981 Firmware Ds K5033 Firmware Ds K5671 Firmware
8.8
CVSS 3.1
Share

CVSS VectorNVD

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Attack Vector
Adjacent
Attack Complexity
Low
Privileges Required
None
User Interaction
None
Scope
Unchanged
Confidentiality
High
Integrity
High
Availability
High

Lifecycle Timeline

2
Analysis Generated
Mar 12, 2026 - 21:54 vuln.today
CVE Published
Jan 13, 2026 - 03:16 nvd
HIGH 8.8

DescriptionNVD

There is a Stack overflow Vulnerability in the device Search and Discovery feature of Hikvision Access Control Products. If exploited, an attacker on the same local area network (LAN) could cause the device to malfunction by sending specially crafted packets to an unpatched device.

AnalysisAI

There is a Stack overflow Vulnerability in the device Search and Discovery feature of Hikvision Access Control Products. If exploited, an attacker on the same local area network (LAN) could cause the device to malfunction by sending specially crafted packets to an unpatched device. [CVSS 8.8 HIGH]

Technical ContextAI

Classified as CWE-121 (Stack-based Buffer Overflow). Affects Ds-K1T331 Firmware. There is a Stack overflow Vulnerability in the device Search and Discovery feature of Hikvision Access Control Products. If exploited, an attacker on the same local area network (LAN) could cause the device to malfunction by sending specially crafted packets to an unpatched device.

RemediationAI

Monitor vendor advisories for a patch.

Share

CVE-2025-66176 vulnerability details – vuln.today
Back

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy