CVE-2025-66176
CVSS Score
8.8
EPSS Score
0.0%
EPSS Percentile
0th
There is a Stack overflow Vulnerability in the device Search and Discovery feature of Hikvision Access Control Products. If exploited, an attacker on the same local area network (LAN) could cause the device to malfunction by sending specially crafted packets to an unpatched device.
| Vendor | hikvision |
| Product | ds-k1t331 |
| Published | Jan 13, 2026 |
| Last Updated | Mar 18, 2026 |
Stay Ahead of the Next One
Get instant alerts for hikvision ds-k1t331
Be the first to know when new high vulnerabilities affecting hikvision ds-k1t331 are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
CVSS v3 Breakdown
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Attack Vector
Adjacent
Attack Complexity
Low
Privileges Required
None
User Interaction
None
Scope
Unchanged
Confidentiality
High
Integrity
High
Availability
High
Affected Versions
Hikvision / DS-K1T331
Versions below V3.7.80
Hikvision / DS-K1T341A/K1T341B
Versions below V3.7.80
Hikvision / DS-K1T671/K5671
Versions below V3.7.80
Hikvision / DS-K1T672
Versions below V3.7.80
Hikvision / DS-K1T680
Versions below V3.7.80
Hikvision / DS-K1T981
Versions below V3.7.80
Hikvision / DS-K1T341C
Versions below V3.3.180
Hikvision / DS-K1T670/K1T673
Versions below V4.48.0
Hikvision / DS-K1T8003
Versions below V1.4.21
Hikvision / DS-K1T804A
Versions below V1.4.22
Hikvision / DS-K1T8003/8004
Versions below V1.4.21
Hikvision / DS-K1T804A
Versions below V1.4.22
Hikvision / DS-K1T804B
Versions below V1.4.23
Hikvision / DS-K1T201A/K1T105A
Versions below V1.3.65
Hikvision / DS-K1T342/K1T343/K1T344/DS-K1T6QT-F72/F43
Versions below V4.48.0
Hikvision / DS-K1T8005/DS-K1T808
Versions below V3.25.40
Hikvision / DS-K1T320/DS-K1T321
Versions below V3.9.40
Hikvision / DS-K1T323/DS-K1T510
Versions below V4.23.41
Hikvision / DS-K5033
Versions below V4.37.40
References
Credits
Matt Wiseman of Cisco Talos