CVE-2025-66176: There is a Buffer overflow Vulnerability in the device Search and Discovery feature of Hikvision Access Contro
41
This month
HIGH 8.8UPGRADEUPGRADEUPGRADE
CVE-2025-66176 is a high-severity flaw (CVSS 8.8) affecting ds-k1t331 firmware, ds-k1t341a firmware, ds-k1t341b firmware. Below: why it ranks where it does, which versions are affected, what to do, and the exact commands.
There is a Buffer overflow Vulnerability in the device Search and Discovery feature of Hikvision Access Control Products. If exploited, an attacker on the same local area network (LAN) could cause the device to malfunction by sending specially crafted packets to an unpatched device.
Last updated 2026-07-09 · Sources: CVE Program, NVD, CISA KEV, EPSS and vendor advisories · How we score
Am I affected?
Timeline
Published CVE record published
Updated Record last modified
hikvision ds-k1t331 firmware UPGRADE
Affected: < 3.7.80
Fixed in: 3.7.80
Safe to downgrade to: no unaffected older release
Check your OS release
cat /etc/os-release; uname -r
Debian / Ubuntu
sudo apt update && sudo apt full-upgrade
RHEL / Amazon Linux / Fedora
sudo dnf upgrade --refresh
Windows
Install the latest cumulative update from Windows Update
If no patch exists yet
OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure.
hikvision ds-k1t341a firmware UPGRADE
Affected: < 3.7.80
Fixed in: 3.7.80
Safe to downgrade to: no unaffected older release
Check your OS release
cat /etc/os-release; uname -r
Debian / Ubuntu
sudo apt update && sudo apt full-upgrade
RHEL / Amazon Linux / Fedora
sudo dnf upgrade --refresh
Windows
Install the latest cumulative update from Windows Update
If no patch exists yet
OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure.
hikvision ds-k1t341b firmware UPGRADE
Affected: < 3.7.80
Fixed in: 3.7.80
Safe to downgrade to: no unaffected older release
Check your OS release
cat /etc/os-release; uname -r
Debian / Ubuntu
sudo apt update && sudo apt full-upgrade
RHEL / Amazon Linux / Fedora
sudo dnf upgrade --refresh
Windows
Install the latest cumulative update from Windows Update
If no patch exists yet
OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure.
hikvision ds-k1t671 firmware UPGRADE
Affected: < 3.7.80
Fixed in: 3.7.80
Safe to downgrade to: no unaffected older release
Check your OS release
cat /etc/os-release; uname -r
Debian / Ubuntu
sudo apt update && sudo apt full-upgrade
RHEL / Amazon Linux / Fedora
sudo dnf upgrade --refresh
Windows
Install the latest cumulative update from Windows Update
If no patch exists yet
OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure.
hikvision ds-k5671 firmware UPGRADE
Affected: < 3.7.80
Fixed in: 3.7.80
Safe to downgrade to: no unaffected older release
Check your OS release
cat /etc/os-release; uname -r
Debian / Ubuntu
sudo apt update && sudo apt full-upgrade
RHEL / Amazon Linux / Fedora
sudo dnf upgrade --refresh
Windows
Install the latest cumulative update from Windows Update
If no patch exists yet
OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure.
hikvision ds-k1t672 firmware UPGRADE
Affected: < 3.7.80
Fixed in: 3.7.80
Safe to downgrade to: no unaffected older release
Check your OS release
cat /etc/os-release; uname -r
Debian / Ubuntu
sudo apt update && sudo apt full-upgrade
RHEL / Amazon Linux / Fedora
sudo dnf upgrade --refresh
Windows
Install the latest cumulative update from Windows Update
If no patch exists yet
OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure.
Verify at the official sourceNVD · CVE Program · Report a problem with this page Scores and fixes here are computed automatically from those and other public sources. Confirm with the vendor advisory before changing production systems.
Quick answers
How do I fix CVE-2025-66176?
ds-k1t331 firmware: upgrade to 3.7.80; ds-k1t341a firmware: upgrade to 3.7.80; ds-k1t341b firmware: upgrade to 3.7.80. Exact commands for each OS are on this page.
Is CVE-2025-66176 being exploited?
CVE-2025-66176 is not on the CISA Known Exploited Vulnerabilities list at the time of the last update. Check again, as this can change.
What does CVE-2025-66176 affect?
CVE-2025-66176 affects ds-k1t331 firmware, ds-k1t341a firmware, ds-k1t341b firmware. Severity is high (CVSS 8.8). There is a Buffer overflow Vulnerability in the device Search and Discovery feature of Hikvision Access Control Products. If exploited, an attacker on the same local area network (LAN) could cause the device to malfunction by sending specia
PatchTheCVE