There is a Buffer overflow Vulnerability in the device Search and Discovery feature of Hikvision Access Control Products.

Summary

There is a Buffer overflow Vulnerability in the device Search and Discovery feature of Hikvision Access Control Products. If exploited, an attacker on the same local area network (LAN) could cause the device to malfunction by sending specially crafted packets to an unpatched device.

Timeline

1. Jan 13, 2026, 1:47 AM UTCCVE published
2. Jan 13, 2026, 2:32 PM UTCCISA SSVC assessment

   Exploitation: none · Automatable: no · Technical impact: total

3. Jul 9, 2026, 6:21 AM UTCRecord last updated

Affected versions

• Hikvision DS-K1T331

  Versions below V3.7.80

• Hikvision DS-K1T341A/K1T341B

  Versions below V3.7.80

• Hikvision DS-K1T671/K5671

  Versions below V3.7.80

• Hikvision DS-K1T672

  Versions below V3.7.80

• Hikvision DS-K1T680

  Versions below V3.7.80

• Hikvision DS-K1T981

  Versions below V3.7.80

• Hikvision DS-K1T341C

  Versions below V3.3.180

• Hikvision DS-K1T670/K1T673

  Versions below V4.48.0

• Hikvision DS-K1T8003

  Versions below V1.4.21

• Hikvision DS-K1T804A

  Versions below V1.4.22

• Hikvision DS-K1T8003/8004

  Versions below V1.4.21

• Hikvision DS-K1T804A

  Versions below V1.4.22

• Hikvision DS-K1T804B

  Versions below V1.4.23

• Hikvision DS-K1T201A/K1T105A

  Versions below V1.3.65

• Hikvision DS-K1T342/K1T343/K1T344/DS-K1T6QT-F72/F43

  Versions below V4.48.0

• Hikvision DS-K1T8005/DS-K1T808

  Versions below V3.25.40

• Hikvision DS-K1T320/DS-K1T321

  Versions below V3.9.40

• Hikvision DS-K1T323/DS-K1T510

  Versions below V4.23.41

• Hikvision DS-K5033

  Versions below V4.37.40

References 1