Privilege Escalation Vulnerability in Hikvision DVR Products

CVE-2025-66173

What is CVE-2025-66173?

A privilege escalation vulnerability exists in certain Hikvision DVR products due to inadequate authentication for the serial port interface. This flaw enables an attacker with physical access to exploit the vulnerability by connecting to the device, thus gaining entry to an unrestricted shell environment. Such access can lead to unauthorized control and potentially compromise the integrity and confidentiality of the system.

References