Medium severity · published Apr 8, 2020
CVE-2020-5736
Amcrest cameras and NVR are vulnerable to a null pointer dereference over port 37777
6.5
CVSS
1.6%
EPSS
No
On KEV
Description
Amcrest cameras and NVR are vulnerable to a null pointer dereference over port 37777. An authenticated remote attacker can abuse this issue to crash the device.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Attack vector
Network
Complexity
Low
Privileges
Low
User interaction
None
Confidentiality
None
Integrity
None
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)1.6% · higher than 75% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
18
1080-lite 8ch Firmware · Amcrest
All versions, or not specified · source: NVD
AF
Amdv10814-h5 Firmware · Amcrest
All versions, or not specified · source: NVD
IF
Ip2m-841 Firmware · Amcrest
before v2.420.ac00.18.r.20200217 · source: NVD
IF
Ip2m-841-v3 Firmware · Amcrest
before v2.800.0000000.6.r.200314 · source: NVD
IF
Ip2m-853ew Firmware · Amcrest
before v2.623.00ac004.0.r.200316 · source: NVD
IF
Ip2m-858w Firmware · Amcrest
before v2.623.00ac004.0.r.200316 · source: NVD
IF
Ip2m-866ew Firmware · Amcrest
before v2.623.00ac004.0.r.200316 · source: NVD
IF
Ip2m-866w Firmware · Amcrest
before v2.623.00ac004.0.r.200316 · source: NVD
IF
Ip4m-1053ew Firmware · Amcrest
before v2.623.00ac004.0.r.200316 · source: NVD
IF
Ip8m-2454ew Firmware · Amcrest
before v2.622.00ac000.0.r.200320 · source: NVD
IF
Ip8m-2493eb Firmware · Amcrest
before v2.622.00ac000.0.r.200320 · source: NVD
IF
Ip8m-2496eb Firmware · Amcrest
before v2.622.00ac000.0.r.200320 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2020-5736
CVE.org
https://www.cve.org/CVERecord?id=CVE-2020-5736
Third Party Advisory
https://www.tenable.com/security/research/tra-2020-20
More from 1080-lite 8ch Firmware
8.8
CVE-2020-5735
Amcrest Cameras and NVR Stack-based Buffer Overflow Vulnerability