First published: Wed Apr 08 2020(Updated: )
Amcrest cameras and NVR are vulnerable to a stack-based buffer overflow over port 37777. An authenticated remote attacker can abuse this issue to crash the device and possibly execute arbitrary code.
Credit: vulnreport@tenable.com vulnreport@tenable.com
Affected Software | Affected Version | How to fix |
---|---|---|
Amcrest 1080-lite 8ch Firmware | ||
Amcrest 1080-lite 8ch | ||
Amcrest Amdv10814-h5 Firmware | ||
Amcrest Amdv10814-h5 | ||
Amcrest Ipm-721 Firmware | <v2.420.ac00.18.r.20200217 | |
Amcrest Ipm-721 | ||
Amcrest Ip2m-841 Firmware | <v2.420.ac00.18.r.20200217 | |
Amcrest Ip2m-841 | ||
Amcrest Ip2m-841-v3 Firmware | <v2.800.0000000.6.r.200314 | |
Amcrest Ip2m-841-v3 | ||
Amcrest Ip2m-853ew Firmware | <v2.623.00ac004.0.r.200316 | |
Amcrest Ip2m-853ew | ||
Amcrest Ip2m-858w Firmware | <v2.623.00ac004.0.r.200316 | |
Amcrest Ip2m-858w | ||
Amcrest Ip2m-866w Firmware | <v2.623.00ac004.0.r.200316 | |
Amcrest Ip2m-866w | ||
Amcrest Ip2m-866ew Firmware | <v2.623.00ac004.0.r.200316 | |
Amcrest Ip2m-866ew | ||
Amcrest Ip4m-1053ew Firmware | <v2.623.00ac004.0.r.200316 | |
Amcrest Ip4m-1053ew | ||
Amcrest Ip8m-2454ew Firmware | <v2.622.00ac000.0.r.200320 | |
Amcrest Ip8m-2454ew | ||
Amcrest Ip8m-2493eb Firmware | <v2.622.00ac000.0.r.200320 | |
Amcrest Ip8m-2493eb | ||
Amcrest Ip8m-2496eb Firmware | <v2.622.00ac000.0.r.200320 | |
Amcrest Ip8m-2496eb | ||
Amcrest Ip8m-2597e Firmware | <v2.800.00ac000.0.r.200330 | |
Amcrest Ip8m-2597e | ||
Amcrest Ip8m-mb2546ew Firmware | <v2.622.00ac000.0.r.200320 | |
Amcrest Ip8m-mb2546ew | ||
Amcrest Ip8m-mt2544ew Firmware | <v2.622.00ac000.0.r.200320 | |
Amcrest Ip8m-mt2544ew | ||
Amcrest Ip8m-t2499ew Firmware | <v2.622.00ac000.0.r.200320 | |
Amcrest Ip8m-t2499ew | ||
Amcrest Ipm-hx1 Firmware | <v2.420.ac00.18.r.20200217 | |
Amcrest Ipm-hx1 | ||
Amcrest Cameras and Network Video Recorder (NVR) | ||
All of | ||
Amcrest 1080-lite 8ch | ||
Amcrest 1080-lite 8ch Firmware | ||
All of | ||
Amcrest Amdv10814-h5 | ||
Amcrest Amdv10814-h5 Firmware | ||
All of | ||
Amcrest Ipm-721 | ||
Amcrest Ipm-721 Firmware | <v2.420.ac00.18.r.20200217 | |
All of | ||
Amcrest Ip2m-841 | ||
Amcrest Ip2m-841 Firmware | <v2.420.ac00.18.r.20200217 | |
All of | ||
Amcrest Ip2m-841-v3 | ||
Amcrest Ip2m-841-v3 Firmware | <v2.800.0000000.6.r.200314 | |
All of | ||
Amcrest Ip2m-853ew | ||
Amcrest Ip2m-853ew Firmware | <v2.623.00ac004.0.r.200316 | |
All of | ||
Amcrest Ip2m-858w | ||
Amcrest Ip2m-858w Firmware | <v2.623.00ac004.0.r.200316 | |
All of | ||
Amcrest Ip2m-866w | ||
Amcrest Ip2m-866w Firmware | <v2.623.00ac004.0.r.200316 | |
All of | ||
Amcrest Ip2m-866ew Firmware | <v2.623.00ac004.0.r.200316 | |
Amcrest Ip2m-866ew | ||
All of | ||
Amcrest Ip4m-1053ew Firmware | <v2.623.00ac004.0.r.200316 | |
Amcrest Ip4m-1053ew | ||
All of | ||
Amcrest Ip8m-2454ew Firmware | <v2.622.00ac000.0.r.200320 | |
Amcrest Ip8m-2454ew | ||
All of | ||
Amcrest Ip8m-2493eb Firmware | <v2.622.00ac000.0.r.200320 | |
Amcrest Ip8m-2493eb | ||
All of | ||
Amcrest Ip8m-2496eb Firmware | <v2.622.00ac000.0.r.200320 | |
Amcrest Ip8m-2496eb | ||
All of | ||
Amcrest Ip8m-2597e Firmware | <v2.800.00ac000.0.r.200330 | |
Amcrest Ip8m-2597e | ||
All of | ||
Amcrest Ip8m-mb2546ew Firmware | <v2.622.00ac000.0.r.200320 | |
Amcrest Ip8m-mb2546ew | ||
All of | ||
Amcrest Ip8m-mt2544ew Firmware | <v2.622.00ac000.0.r.200320 | |
Amcrest Ip8m-mt2544ew | ||
All of | ||
Amcrest Ip8m-t2499ew Firmware | <v2.622.00ac000.0.r.200320 | |
Amcrest Ip8m-t2499ew | ||
All of | ||
Amcrest Ipm-hx1 Firmware | <v2.420.ac00.18.r.20200217 | |
Amcrest Ipm-hx1 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2020-5735 is a vulnerability in Amcrest Cameras and NVR that allows an authenticated remote attacker to crash the device and possibly execute arbitrary code.
The severity of CVE-2020-5735 is high with a CVSS score of 8.8.
CVE-2020-5735 affects Amcrest Cameras and NVR by exploiting a stack-based buffer overflow over port 37777.
An authenticated remote attacker can exploit CVE-2020-5735 to crash the device and potentially execute arbitrary code.
Currently, there is no information available about specific fixes or patches for CVE-2020-5735. It is recommended to contact the vendor for more information.