CVEvulnerability

CVE-2020-5735

8.8 HIGH Known exploited Published 2020-04-08 Modified 2026-06-17 Official page ↗

CISA Known Exploited Vulnerability

Amcrest Cameras and NVR Stack-based Buffer Overflow Vulnerability — Amcrest Cameras and Network Video Recorder (NVR)

Amcrest cameras and NVR contain a stack-based buffer overflow vulnerability through port 37777 that allows an unauthenticated, remote attacker to crash the device and possibly execute code.

Added to KEV
2021-11-03
Remediation due
2022-05-03
Ransomware use
Unknown
Required action
Apply updates per vendor instructions.
Notes
https://nvd.nist.gov/vuln/detail/CVE-2020-5735
Status
Analyzed
Published
2020-04-08
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
8.8 HIGH — CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS 3.1 (134c704f-9b21-4f2e-91b3-4a467353bcc0)
8.8 HIGH — CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS 2.0 ([email protected])
8.0 HIGH — AV:N/AC:L/Au:S/C:P/I:P/A:C
Weaknesses
CWE-121, CWE-787

Description

Amcrest cameras and NVR are vulnerable to a stack-based buffer overflow over port 37777. An authenticated remote attacker can abuse this issue to crash the device and possibly execute arbitrary code.

Affected configurations

• amcrest 1080-lite 8ch firmware • amcrest amdv10814-h5 firmware • amcrest ipm-721 firmware (< v2.420.ac00.18.r.20200217) • amcrest ip2m-841 firmware (< v2.420.ac00.18.r.20200217) • amcrest ip2m-841-v3 firmware (< v2.800.0000000.6.r.200314) • amcrest ip2m-853ew firmware (< v2.623.00ac004.0.r.200316) • amcrest ip2m-858w firmware (< v2.623.00ac004.0.r.200316) • amcrest ip2m-866w firmware (< v2.623.00ac004.0.r.200316) • amcrest ip2m-866ew firmware (< v2.623.00ac004.0.r.200316) • amcrest ip4m-1053ew firmware (< v2.623.00ac004.0.r.200316) • amcrest ip8m-2454ew firmware (< v2.622.00ac000.0.r.200320) • amcrest ip8m-2493eb firmware (< v2.622.00ac000.0.r.200320) • amcrest ip8m-2496eb firmware (< v2.622.00ac000.0.r.200320) • amcrest ip8m-2597e firmware (< v2.800.00ac000.0.r.200330) • amcrest ip8m-mb2546ew firmware (< v2.622.00ac000.0.r.200320) • amcrest ip8m-mt2544ew firmware (< v2.622.00ac000.0.r.200320) • amcrest ip8m-t2499ew firmware (< v2.622.00ac000.0.r.200320) • amcrest ipm-hx1 firmware (< v2.420.ac00.18.r.20200217)

Related

Weakness · CWE (2)

  • CWE-121 Stack-based Buffer Overflow weakness
  • CWE-787 Out-of-bounds Write weakness

References