CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2020-5735

Amcrest cameras and NVR are vulnerable to a stack-based buffer overflow over port 37777. An authenticated remote attacker can abuse this issue to crash the device and possibly execute arbitrary code.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.482

EPSS Ranking 97.6%

CVSS Severity

CVSS v3 Score 8.8

CVSS v2 Score 8.0

Proposed Action

Amcrest cameras and NVR contain a stack-based buffer overflow vulnerability through port 37777 that allows an unauthenticated, remote attacker to crash the device and possibly execute code.

Ransomware Campaign

Unknown

References

Products affected by CVE-2020-5735

Amcrest » 1080-Lite 8ch » Version: N/A

cpe:2.3:h:amcrest:1080-lite_8ch:-
Amcrest » Amdv10814-H5 » Version: N/A

cpe:2.3:h:amcrest:amdv10814-h5:-
Amcrest » Ip2m-841-V3 » Version: N/A

cpe:2.3:h:amcrest:ip2m-841-v3:-
Amcrest » Ip2m-841 » Version: N/A

cpe:2.3:h:amcrest:ip2m-841:-
Amcrest » Ip2m-853ew » Version: N/A

cpe:2.3:h:amcrest:ip2m-853ew:-
Amcrest » Ip2m-858w » Version: N/A

cpe:2.3:h:amcrest:ip2m-858w:-
Amcrest » Ip2m-866ew » Version: N/A

cpe:2.3:h:amcrest:ip2m-866ew:-
Amcrest » Ip2m-866w » Version: N/A

cpe:2.3:h:amcrest:ip2m-866w:-
Amcrest » Ip4m-1053ew » Version: N/A

cpe:2.3:h:amcrest:ip4m-1053ew:-
Amcrest » Ip8m-2454ew » Version: N/A

cpe:2.3:h:amcrest:ip8m-2454ew:-
Amcrest » Ip8m-2493eb » Version: N/A

cpe:2.3:h:amcrest:ip8m-2493eb:-
Amcrest » Ip8m-2496eb » Version: N/A

cpe:2.3:h:amcrest:ip8m-2496eb:-
Amcrest » Ip8m-2597e » Version: N/A

cpe:2.3:h:amcrest:ip8m-2597e:-
Amcrest » Ip8m-Mb2546ew » Version: N/A

cpe:2.3:h:amcrest:ip8m-mb2546ew:-
Amcrest » Ip8m-Mt2544ew » Version: N/A

cpe:2.3:h:amcrest:ip8m-mt2544ew:-
Amcrest » Ip8m-T2499ew » Version: N/A

cpe:2.3:h:amcrest:ip8m-t2499ew:-
Amcrest » Ipm-721 » Version: N/A

cpe:2.3:h:amcrest:ipm-721:-
Amcrest » Ipm-Hx1 » Version: N/A

cpe:2.3:h:amcrest:ipm-hx1:-
Amcrest » 1080-Lite 8ch Firmware » Version: N/A

cpe:2.3:o:amcrest:1080-lite_8ch_firmware:-
Amcrest » Amdv10814-H5 Firmware » Version: N/A

cpe:2.3:o:amcrest:amdv10814-h5_firmware:-
Amcrest » Ip2m-841-V3 Firmware » Version: Any

cpe:2.3:o:amcrest:ip2m-841-v3_firmware:*
Amcrest » Ip2m-841 Firmware » Version: Any

cpe:2.3:o:amcrest:ip2m-841_firmware:*
Amcrest » Ip2m-853ew Firmware » Version: Any

cpe:2.3:o:amcrest:ip2m-853ew_firmware:*
Amcrest » Ip2m-858w Firmware » Version: Any

cpe:2.3:o:amcrest:ip2m-858w_firmware:*
Amcrest » Ip2m-866ew Firmware » Version: Any

cpe:2.3:o:amcrest:ip2m-866ew_firmware:*
Amcrest » Ip2m-866w Firmware » Version: Any

cpe:2.3:o:amcrest:ip2m-866w_firmware:*
Amcrest » Ip4m-1053ew Firmware » Version: Any

cpe:2.3:o:amcrest:ip4m-1053ew_firmware:*
Amcrest » Ip8m-2454ew Firmware » Version: Any

cpe:2.3:o:amcrest:ip8m-2454ew_firmware:*
Amcrest » Ip8m-2493eb Firmware » Version: Any

cpe:2.3:o:amcrest:ip8m-2493eb_firmware:*
Amcrest » Ip8m-2496eb Firmware » Version: Any

cpe:2.3:o:amcrest:ip8m-2496eb_firmware:*
Amcrest » Ip8m-2597e Firmware » Version: Any

cpe:2.3:o:amcrest:ip8m-2597e_firmware:*
Amcrest » Ip8m-Mb2546ew Firmware » Version: Any

cpe:2.3:o:amcrest:ip8m-mb2546ew_firmware:*
Amcrest » Ip8m-Mt2544ew Firmware » Version: Any

cpe:2.3:o:amcrest:ip8m-mt2544ew_firmware:*
Amcrest » Ip8m-T2499ew Firmware » Version: Any

cpe:2.3:o:amcrest:ip8m-t2499ew_firmware:*
Amcrest » Ipm-721 Firmware » Version: Any

cpe:2.3:o:amcrest:ipm-721_firmware:*
Amcrest » Ipm-Hx1 Firmware » Version: Any

cpe:2.3:o:amcrest:ipm-hx1_firmware:*

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2020-5735

Products

Pricing

Contact Us