Hikvision Ds-77xxni-Mx vulnerabilities

2 CVEs affecting Hikvision Ds-77xxni-Mx, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2025-66177, published 2026-01-13.

More from Hikvision.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2024-29949, published 2024-04-02. High severity, CVSS 7.2. EPSS: 1.3% chance of exploitation in the next 30 days. There is a command injection vulnerability in some Hikvision NVRs. This could allow an authenticated user with administrative rights to execute arbitrary commands.
• CVE-2025-66177, published 2026-01-13. High severity, CVSS 8.8. EPSS: 0.3% chance of exploitation in the next 30 days. There is a Buffer overflow Vulnerability in the device Search and Discovery feature of Hikvision NVR/DVR/CVR/IPC models. If exploited, an attacker on the same local area network (LAN) could cause the…