CVE-2020-5735: Amcrest Cameras and NVR Stack-based Buffer Overflow Vulnerability

High severity · published Apr 8, 2020

CVE-2020-5735

Amcrest Cameras and NVR Stack-based Buffer Overflow Vulnerability

In wildKEV

8.8

CVSS

36.2%

EPSS

Yes

On KEV

Description

Amcrest cameras and NVR are vulnerable to a stack-based buffer overflow over port 37777. An authenticated remote attacker can abuse this issue to crash the device and possibly execute arbitrary code.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Attack vector

Network

Complexity

Low

Privileges

Low

User interaction

None

Confidentiality

High

Integrity

High

Availability

High

Scope

Unchanged

Exploitation

Is it being used?

Exploit prediction (EPSS)36.2% · higher than 98% of CVEs

Exploited in the wildYes

CISA KEVListed Nov 3, 2021

Federal remediation dueMay 3, 2022

Ransomware campaign useNot known

Affected products

Which versions

Amcrest ·

before 2.623.00AC004.0.R.200316, 2.420.AC00.18.R.20200217, 2.800.00AC000.0.R.200330, 2.800.0000000.6.R.200314.bin, 2.622.00AC000.0.R.200320.bin, and 4.000.00AC000.0.R.200218 · source: vendor

1080-lite 8ch Firmware · Amcrest

All versions, or not specified · source: NVD

Amdv10814-h5 Firmware · Amcrest

All versions, or not specified · source: NVD

Ip2m-841 Firmware · Amcrest

before v2.420.ac00.18.r.20200217 · source: NVD

Ip2m-841-v3 Firmware · Amcrest

before v2.800.0000000.6.r.200314 · source: NVD

Ip2m-853ew Firmware · Amcrest

before v2.623.00ac004.0.r.200316 · source: NVD

Ip2m-858w Firmware · Amcrest

before v2.623.00ac004.0.r.200316 · source: NVD