Evil-DB LogoEvil-DB
← All CVEs

CVE-2020-5735

high · 8.8Actively exploited

On the CISA Known Exploited Vulnerabilities catalog

Apply updates per vendor instructions.

Added 2021-11-03Remediation due 2022-05-03

Amcrest cameras and NVR are vulnerable to a stack-based buffer overflow over port 37777. An authenticated remote attacker can abuse this issue to crash the device and possibly execute arbitrary code.

8.8
CVSS
36.2%
EPSS (exploit prob.)
98th
EPSS percentile
2020-04-08
Published

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weaknesses

CWE-121CWE-787

Affected products

VendorProductAffected versions
amcrest1080-lite_8ch_firmwareall versions
amcrest1080-lite_8chall versions
amcrestamdv10814-h5_firmwareall versions
amcrestamdv10814-h5all versions
amcrestipm-721_firmware< v2.420.ac00.18.r.20200217
amcrestipm-721all versions
amcrestip2m-841_firmware< v2.420.ac00.18.r.20200217
amcrestip2m-841all versions
amcrestip2m-841-v3_firmware< v2.800.0000000.6.r.200314
amcrestip2m-841-v3all versions
amcrestip2m-853ew_firmware< v2.623.00ac004.0.r.200316
amcrestip2m-853ewall versions
amcrestip2m-858w_firmware< v2.623.00ac004.0.r.200316
amcrestip2m-858wall versions
amcrestip2m-866w_firmware< v2.623.00ac004.0.r.200316
amcrestip2m-866wall versions
amcrestip2m-866ew_firmware< v2.623.00ac004.0.r.200316
amcrestip2m-866ewall versions
amcrestip4m-1053ew_firmware< v2.623.00ac004.0.r.200316
amcrestip4m-1053ewall versions
amcrestip8m-2454ew_firmware< v2.622.00ac000.0.r.200320
amcrestip8m-2454ewall versions
amcrestip8m-2493eb_firmware< v2.622.00ac000.0.r.200320
amcrestip8m-2493eball versions
amcrestip8m-2496eb_firmware< v2.622.00ac000.0.r.200320
amcrestip8m-2496eball versions
amcrestip8m-2597e_firmware< v2.800.00ac000.0.r.200330
amcrestip8m-2597eall versions
amcrestip8m-mb2546ew_firmware< v2.622.00ac000.0.r.200320
amcrestip8m-mb2546ewall versions
amcrestip8m-mt2544ew_firmware< v2.622.00ac000.0.r.200320
amcrestip8m-mt2544ewall versions
amcrestip8m-t2499ew_firmware< v2.622.00ac000.0.r.200320
amcrestip8m-t2499ewall versions
amcrestipm-hx1_firmware< v2.420.ac00.18.r.20200217
amcrestipm-hx1all versions

Check a specific version with /api/v1/cve/match.

References

Query this programmatically:

curl https://evil-db.io/api/v1/cve/CVE-2020-5735