8.8High

CVE-2025-66176

Hikvision DS-K1T331; Hikvision DS-K1T341A/K1T341B; Hikvision DS-K1T671/K5671; Hikvision DS-K1T672 Published: (10 months ago)

Description

There is a Buffer overflow Vulnerability in the device Search and Discovery feature of Hikvision Access Control Products. If exploited, an attacker on the same local area network (LAN) could cause the device to malfunction by sending specially crafted packets to an unpatched device.

Weakness (CWE): CWE-121

Data: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Published as the sources state it, in English.

Affected products and versions

VendorProductVersions
hikvision ds-k1t105a firmware < 1.3.65
hikvision ds-k1t201a firmware < 1.3.65
Hikvision DS-K1T201A/K1T105A Versions below V1.3.65
Hikvision DS-K1T320/DS-K1T321 Versions below V3.9.40
hikvision ds-k1t320 firmware < 3.9.40
hikvision ds-k1t321 firmware < 3.9.40
Hikvision DS-K1T323/DS-K1T510 Versions below V4.23.41
hikvision ds-k1t323 firmware < 4.23.41
Hikvision DS-K1T331 Versions below V3.7.80
hikvision ds-k1t331 firmware < 3.7.80
hikvision ds-k1t341a firmware < 3.7.80
Hikvision DS-K1T341A/K1T341B Versions below V3.7.80
hikvision ds-k1t341b firmware < 3.7.80
Hikvision DS-K1T341C Versions below V3.3.180
hikvision ds-k1t341c firmware < 3.3.180
hikvision ds-k1t342 firmware < 4.48.0
Hikvision DS-K1T342/K1T343/K1T344/DS-K1T6QT-F72/F43 Versions below V4.48.0
hikvision ds-k1t343 firmware < 4.48.0
hikvision ds-k1t344 firmware < 4.48.0
hikvision ds-k1t510 firmware < 4.23.41
hikvision ds-k1t670 firmware < 4.48.0
Hikvision DS-K1T670/K1T673 Versions below V4.48.0
hikvision ds-k1t671 firmware < 3.7.80
Hikvision DS-K1T671/K5671 Versions below V3.7.80
Hikvision DS-K1T672 Versions below V3.7.80
hikvision ds-k1t672 firmware < 3.7.80
hikvision ds-k1t673 firmware < 4.48.0
Hikvision DS-K1T680 Versions below V3.7.80
hikvision ds-k1t680 firmware < 3.7.80
hikvision ds-k1t6qt-f43 firmware < 4.48.0
hikvision ds-k1t6qt-f72 firmware < 4.48.0
Hikvision DS-K1T8003 Versions below V1.4.21
Hikvision DS-K1T8003/8004 Versions below V1.4.21
hikvision ds-k1t8003 firmware ≤ 1.4.21
Hikvision DS-K1T8005/DS-K1T808 Versions below V3.25.40
hikvision ds-k1t8005 firmware < 3.25.40
Hikvision DS-K1T804A Versions below V1.4.22
hikvision ds-k1t804a firmware < 1.4.22
Hikvision DS-K1T804B Versions below V1.4.23
hikvision ds-k1t804b firmware < 1.4.23
hikvision ds-k1t808 firmware < 3.25.40
Hikvision DS-K1T981 Versions below V3.7.80
hikvision ds-k1t981 firmware < 3.7.80
Hikvision DS-K5033 Versions below V4.37.40
hikvision ds-k5033 firmware < 4.37.40
hikvision ds-k5671 firmware < 3.7.80

References and patches

CPE matches (NVD) (28)

  • cpe:2.3:o:hikvision:ds-k1t331_firmware:*:*:*:*:*:*:*:* < 3.7.80
  • cpe:2.3:o:hikvision:ds-k1t341a_firmware:*:*:*:*:*:*:*:* < 3.7.80
  • cpe:2.3:o:hikvision:ds-k1t341b_firmware:*:*:*:*:*:*:*:* < 3.7.80
  • cpe:2.3:o:hikvision:ds-k1t671_firmware:*:*:*:*:*:*:*:* < 3.7.80
  • cpe:2.3:o:hikvision:ds-k5671_firmware:*:*:*:*:*:*:*:* < 3.7.80
  • cpe:2.3:o:hikvision:ds-k1t672_firmware:*:*:*:*:*:*:*:* < 3.7.80
  • cpe:2.3:o:hikvision:ds-k1t680_firmware:*:*:*:*:*:*:*:* < 3.7.80
  • cpe:2.3:o:hikvision:ds-k1t981_firmware:*:*:*:*:*:*:*:* < 3.7.80
  • cpe:2.3:o:hikvision:ds-k1t341c_firmware:*:*:*:*:*:*:*:* < 3.3.180
  • cpe:2.3:o:hikvision:ds-k1t670_firmware:*:*:*:*:*:*:*:* < 4.48.0
  • cpe:2.3:o:hikvision:ds-k1t673_firmware:*:*:*:*:*:*:*:* < 4.48.0
  • cpe:2.3:o:hikvision:ds-k1t8003_firmware:*:*:*:*:*:*:*:* ≤ 1.4.21
  • cpe:2.3:o:hikvision:ds-k1t804a_firmware:*:*:*:*:*:*:*:* < 1.4.22
  • cpe:2.3:o:hikvision:ds-k1t804b_firmware:*:*:*:*:*:*:*:* < 1.4.23
  • cpe:2.3:o:hikvision:ds-k1t201a_firmware:*:*:*:*:*:*:*:* < 1.3.65
  • cpe:2.3:o:hikvision:ds-k1t105a_firmware:*:*:*:*:*:*:*:* < 1.3.65
  • cpe:2.3:o:hikvision:ds-k1t342_firmware:*:*:*:*:*:*:*:* < 4.48.0
  • cpe:2.3:o:hikvision:ds-k1t343_firmware:*:*:*:*:*:*:*:* < 4.48.0
  • cpe:2.3:o:hikvision:ds-k1t344_firmware:*:*:*:*:*:*:*:* < 4.48.0
  • cpe:2.3:o:hikvision:ds-k1t6qt-f72_firmware:*:*:*:*:*:*:*:* < 4.48.0
  • cpe:2.3:o:hikvision:ds-k1t6qt-f43_firmware:*:*:*:*:*:*:*:* < 4.48.0
  • cpe:2.3:o:hikvision:ds-k1t8005_firmware:*:*:*:*:*:*:*:* < 3.25.40
  • cpe:2.3:o:hikvision:ds-k1t808_firmware:*:*:*:*:*:*:*:* < 3.25.40
  • cpe:2.3:o:hikvision:ds-k1t320_firmware:*:*:*:*:*:*:*:* < 3.9.40
  • cpe:2.3:o:hikvision:ds-k1t321_firmware:*:*:*:*:*:*:*:* < 3.9.40
  • cpe:2.3:o:hikvision:ds-k1t323_firmware:*:*:*:*:*:*:*:* < 4.23.41
  • cpe:2.3:o:hikvision:ds-k1t510_firmware:*:*:*:*:*:*:*:* < 4.23.41
  • cpe:2.3:o:hikvision:ds-k5033_firmware:*:*:*:*:*:*:*:* < 4.37.40