CVE-2025-66176: Hikvision Ds-k1t105a Firmware

High severity, CVSS 8.8. EPSS: 0.5% chance of exploitation in the next 30 days.

There is a Buffer overflow Vulnerability in the device Search and Discovery feature of Hikvision Access Control Products. If exploited, an attacker on the same local area network (LAN) could cause the device to malfunction by sending specially crafted packets to an unpatched device.

Affected products

  • Hikvision Ds-k1t105a Firmware: before 1.3.65 (fixed in 1.3.65)
  • Hikvision Ds-k1t201a Firmware: before 1.3.65 (fixed in 1.3.65)
  • Hikvision Ds-k1t320 Firmware: before 3.9.40 (fixed in 3.9.40)
  • Hikvision Ds-k1t321 Firmware: before 3.9.40 (fixed in 3.9.40)
  • Hikvision Ds-k1t323 Firmware: before 4.23.41 (fixed in 4.23.41)
  • Hikvision Ds-k1t331 Firmware: before 3.7.80 (fixed in 3.7.80)
  • Hikvision Ds-k1t341a Firmware: before 3.7.80 (fixed in 3.7.80)
  • Hikvision Ds-k1t341b Firmware: before 3.7.80 (fixed in 3.7.80)
  • Hikvision Ds-k1t341c Firmware: before 3.3.180 (fixed in 3.3.180)
  • Hikvision Ds-k1t342 Firmware: before 4.48.0 (fixed in 4.48.0)
  • Hikvision Ds-k1t343 Firmware: before 4.48.0 (fixed in 4.48.0)
  • Hikvision Ds-k1t344 Firmware: before 4.48.0 (fixed in 4.48.0)
  • Hikvision Ds-k1t510 Firmware: before 4.23.41 (fixed in 4.23.41)
  • Hikvision Ds-k1t670 Firmware: before 4.48.0 (fixed in 4.48.0)
  • Hikvision Ds-k1t671 Firmware: before 3.7.80 (fixed in 3.7.80)
  • Hikvision Ds-k1t672 Firmware: before 3.7.80 (fixed in 3.7.80)
  • Hikvision Ds-k1t673 Firmware: before 4.48.0 (fixed in 4.48.0)
  • Hikvision Ds-k1t680 Firmware: before 3.7.80 (fixed in 3.7.80)
  • Hikvision Ds-k1t6qt-f43 Firmware: before 4.48.0 (fixed in 4.48.0)
  • Hikvision Ds-k1t6qt-f72 Firmware: before 4.48.0 (fixed in 4.48.0)
  • Hikvision Ds-k1t8003 Firmware: up to and including 1.4.21
  • Hikvision Ds-k1t8005 Firmware: before 3.25.40 (fixed in 3.25.40)
  • Hikvision Ds-k1t804a Firmware: before 1.4.22 (fixed in 1.4.22)
  • Hikvision Ds-k1t804b Firmware: before 1.4.23 (fixed in 1.4.23)
  • Hikvision Ds-k1t808 Firmware: before 3.25.40 (fixed in 3.25.40)
  • and 3 more

Published 2026-01-13. Last modified 2026-07-09.