{"id":"CVE-2025-66177","title":"There is a Buffer overflow Vulnerability in the device Search and Discovery feature of Hikvision NVR/DVR/CVR/IPC models","summary":"There is a Buffer overflow Vulnerability in the device Search and Discovery feature of Hikvision NVR/DVR/CVR/IPC models. If exploited, an attacker on the same local area network (LAN) could cause the device to malfunction by sending spec…","severity":"high","cvss":8.8,"cvssVector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cwe":["CWE-121"],"published":"2026-01-13","updated":"2026-07-09","source":"NVD","sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2025-66177","references":[{"url":"https://www.hikvision.com/en/support/cybersecurity/security-advisory/buffer-overflow-vulnerabilities-in-some-hikvision-products/","label":"hsrc@hikvision.com"}],"tags":["nvd","exploit-available"],"epss":0.0035,"epssPercentile":0.25891,"ingestedAt":"2026-07-10T01:55:22.917Z","exploits":{"github":1,"githubRepos":["https://github.com/ang3lL/CVE-2025-66177"],"checkedAt":"2026-09-25T08:20:48.316Z"},"exploitAvailable":true,"slug":"CVE-2025-66177","body":"## Overview\n\nThere is a Buffer overflow Vulnerability in the device Search and Discovery feature of Hikvision NVR/DVR/CVR/IPC models. If exploited, an attacker on the same local area network (LAN) could cause the device to malfunction by sending specially crafted packets to an unpatched device.\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.","depth":"midnight","depthScore":60,"depthScoreParts":{"impact":48.4,"likelihood":0.1,"exploitation":12,"ransomware":0},"changes":[{"seq":4897,"id":"CVE-2025-66177","ts":1788887215311,"field":"exploit_available","old":"false","new":"true"},{"seq":3780,"id":"CVE-2025-66177","ts":1788886334857,"field":"exploit_available","old":"true","new":"false"},{"seq":2625,"id":"CVE-2025-66177","ts":1788883013093,"field":"exploit_available","old":"false","new":"true"},{"seq":1654,"id":"CVE-2025-66177","ts":1788882417444,"field":"exploit_available","old":"true","new":"false"},{"seq":762,"id":"CVE-2025-66177","ts":1788881850750,"field":"exploit_available","old":"false","new":"true"}]}