Multiple Hikvision Vulnerabilities Allow Attackers to Disrupt Devices Using Crafted Packets

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Hikvision Faces Critical Vulnerabilities Allowing Device Disruption Hikvision has disclosed two critical vulnerabilities affecting its security devices, allowing attackers on the same local area network to disrupt device functionality by sending specially crafted packets. These vulnerabilities, identified as CVE-2025-66176 and CVE-2025-66177, have been assigned a high CVSS v3.1 base score, indicating their severity. 3 sources 31