What is the CVSS score of CVE-2025-66176?

CVE-2025-66176 has a CVSS 3.1 base score of 8.8 (High). CVSS vector: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H. EPSS exploitation probability: 0.0%.

Which versions of Ds K5671 Firmware are affected by CVE-2025-66176?

Organizations using There face significant risk from CVE-2025-66176, a stack-based buffer overflow vulnerability rated CVSS 8.8.

How to fix or mitigate CVE-2025-66176?

Within 7 days: Identify all affected systems and apply vendor patches promptly. If patching is delayed, consider network segmentation to limit exposure.

Ds K5671 Firmware CVE-2025-66176

HIGH

Stack-based Buffer Overflow (CWE-121)

2026-01-13 hsrc@hikvision.com

Hikvision Stack Overflow Buffer Overflow Ds K5671 Firmware Ds K1t6qt F43 Firmware Ds K1t680 Firmware Ds K1t8005 Firmware Ds K1t670 Firmware Ds K1t342 Firmware Ds K1t105a Firmware Ds K1t510 Firmware Ds K1t321 Firmware Ds K1t201a Firmware Ds K1t8003 Firmware Ds K1t344 Firmware Ds K1t672 Firmware Ds K1t804a Firmware Ds K1t808 Firmware Ds K1t804b Firmware Ds K1t341c Firmware Ds K1t981 Firmware Ds K1t341b Firmware Ds K1t343 Firmware Ds K1t671 Firmware Ds K1t323 Firmware Ds K5033 Firmware Ds K1t331 Firmware Ds K1t320 Firmware Ds K1t673 Firmware Ds K1t6qt F72 Firmware Ds K1t341a Firmware

8.8

CVSS 3.1 · Vendor: hikvision

Severity by source

Vendor (hikvision) PRIMARY

8.8 HIGH

AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Primary rating from Vendor (hikvision) · only source for this CVE.

CVSS VectorVendor: hikvision

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Attack Vector

Adjacent

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

High

Lifecycle Timeline

Analysis Generated

Mar 12, 2026 - 21:54 vuln.today

CVE Published

Jan 13, 2026 - 03:16 nvd

HIGH 8.8

DescriptionCVE.org

There is a Stack overflow Vulnerability in the device Search and Discovery feature of Hikvision Access Control Products. If exploited, an attacker on the same local area network (LAN) could cause the device to malfunction by sending specially crafted packets to an unpatched device.

AnalysisAI

Technical ContextAI

Classified as CWE-121 (Stack-based Buffer Overflow). Affects Ds-K1T331 Firmware. There is a Stack overflow Vulnerability in the device Search and Discovery feature of Hikvision Access Control Products. If exploited, an attacker on the same local area network (LAN) could cause the device to malfunction by sending specially crafted packets to an unpatched device.