PT-2026-2348 · Hikvision · Hikvision Nvr+1

Published 2026-01-12 · Updated 2026-04-15 · CVE-2025-66177

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Hikvision NVR/DVR/CVR/IPC models (affected versions not specified)

Description A stack overflow issue exists in the device Search and Discovery feature of Hikvision NVR/DVR/CVR/IPC models. An attacker on the same local area network (LAN) could cause the device to malfunction by sending specially crafted packets to an unpatched device.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Stack Overflow

Weakness Enumeration

CWE-121

Related Identifiers

BDU:2026-01038

CVE-2025-66177

Affected Products

Hikvision Nvr

Hikvision Ipc

References · 9

• https://bdu.fstec.ru/vul/2026-01038 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2025-66177 · Security Note
• https://twitter.com/ThreatSynop/status/2010974323637375194 · Twitter Post
• https://hikvision.com/en/support/cybersecurity/security-advisory/buffer-overflow-vulnerabilities-in-some-hikvision-products · Note
• https://twitter.com/ThreatSynop/status/2011037304157090081 · Twitter Post
• https://twitter.com/ekoparty/status/2044494023717752910 · Twitter Post
• https://twitter.com/The_Cyber_News/status/2010979318093238521 · Twitter Post
• https://twitter.com/CVEnew/status/2010911092139032603 · Twitter Post
• https://twitter.com/vercomsystems/status/2013302689572995297 · Twitter Post