CVE-2025-66176 Memory corruption in DS-K1T201A/K1T105A
A buffer overflow in Hikvision access control devices allows LAN attackers to cause device malfunction via crafted packets.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2025-66176?
CVE-2025-66176 is a high-severity memory corruption vulnerability in Hikvision DS-K1T201A/K1T105A, published on 13 Jan 2026. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
There is a Buffer overflow Vulnerability in the device Search and Discovery feature of Hikvision Access Control Products. If exploited, an attacker on the same local area network (LAN) could cause the device to malfunction by sending specially crafted packets to an unpatched device.
Weakness: CWE-121
Which versions are affected by CVE-2025-66176?
It affects 28 products.
Products include Hikvision Ds-K1t105a Firmware, Hikvision Ds-K1t201a Firmware, Hikvision Ds-K1t320 Firmware, Hikvision Ds-K1t321 Firmware, Hikvision Ds-K1t323 Firmware, Hikvision Ds-K1t331 Firmware and 22 more.
How do I fix CVE-2025-66176?
No fix has been published for CVE-2025-66176 yet. Limit exposure of the affected software until one is available.
Upgrade to the fixed version. Memory-safe languages, compiler hardening and fuzzing prevent most new cases. More about Memory corruption.
Is CVE-2025-66176 being exploited?
There is no known exploitation of CVE-2025-66176 in the wild and no public exploit code.
Sources
Also known as GHSA-3mmv-v6g2-g7c6.