Privilege Escalation Vulnerability in Hikvision DVR Products
CVE-2025-66173

6.2MEDIUM

Key Information:

Vendor

Hikvision

Status
Ds-7104hghi-f1
Ds-7204hghi-f1
Vendor
CVE Published:
19 December 2025

What is CVE-2025-66173?

A privilege escalation vulnerability exists in certain Hikvision DVR products due to inadequate authentication for the serial port interface. This flaw enables an attacker with physical access to exploit the vulnerability by connecting to the device, thus gaining entry to an unrestricted shell environment. Such access can lead to unauthorized control and potentially compromise the integrity and confidentiality of the system.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

Affected Version(s)

DS-7104HGHI-F1 Versions below V4.30.122_201107 (including V4.30.122_201107)

DS-7204HGHI-F1 Versions below V4.30.122_201107 (including V4.30.122_201107)

References

https://www.hikvision.com/en/support/cybersecurity/securi...

CVSS V3.1

Score:
6.2
Severity:
MEDIUM
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Physical
Attack Complexity:
Low
Privileges Required:
High
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Aaron J Jose
JSON
.