CVEvulnerability

CVE-2020-5736

6.5 MEDIUM Published 2020-04-08 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2020-04-08
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
6.5 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
CVSS 2.0 ([email protected])
6.8 MEDIUM — AV:N/AC:L/Au:S/C:N/I:N/A:C
Weaknesses
CWE-476

Description

Amcrest cameras and NVR are vulnerable to a null pointer dereference over port 37777. An authenticated remote attacker can abuse this issue to crash the device.

Affected configurations

• amcrest 1080-lite 8ch firmware • amcrest amdv10814-h5 firmware • amcrest ipm-721 firmware (< v2.420.ac00.18.r.20200217) • amcrest ip2m-841 firmware (< v2.420.ac00.18.r.20200217) • amcrest ip2m-841-v3 firmware (< v2.800.0000000.6.r.200314) • amcrest ip2m-853ew firmware (< v2.623.00ac004.0.r.200316) • amcrest ip2m-858w firmware (< v2.623.00ac004.0.r.200316) • amcrest ip2m-866w firmware (< v2.623.00ac004.0.r.200316) • amcrest ip2m-866ew firmware (< v2.623.00ac004.0.r.200316) • amcrest ip4m-1053ew firmware (< v2.623.00ac004.0.r.200316) • amcrest ip8m-2454ew firmware (< v2.622.00ac000.0.r.200320) • amcrest ip8m-2493eb firmware (< v2.622.00ac000.0.r.200320) • amcrest ip8m-2496eb firmware (< v2.622.00ac000.0.r.200320) • amcrest ip8m-2597e firmware (< v2.800.00ac000.0.r.200330) • amcrest ip8m-mb2546ew firmware (< v2.622.00ac000.0.r.200320) • amcrest ip8m-mt2544ew firmware (< v2.622.00ac000.0.r.200320) • amcrest ip8m-t2499ew firmware (< v2.622.00ac000.0.r.200320) • amcrest ipm-hx1 firmware (< v2.420.ac00.18.r.20200217)

Related

Weakness · CWE (1)

  • CWE-476 NULL Pointer Dereference weakness

References