ZeroDay Findings
Sign inSign up

Findings

CVE-2020-5735

Amcrest Cameras and NVR Stack-based Buffer Overflow Vulnerability

Published Apr 8, 2020 · updated Jun 16, 2026 · amcrest 1080-lite 8ch firmware

Amcrest cameras and NVR are vulnerable to a stack-based buffer overflow over port 37777. An authenticated remote attacker can abuse this issue to crash the device and possibly execute arbitrary code.

Timeline

Detection, updates, and resolution for this record.

  1. Apr 8, 2020 · Catalog

    Detected

    Amcrest cameras and NVR are vulnerable to a stack-based buffer overflow over port 37777. An authenticated remote attacker can abuse this issue to crash the device and possibly execute arbitrary code.

  2. Nov 3, 2021 · CISA KEV

    Known exploited

    Apply updates per vendor instructions.

  3. May 3, 2022 · CISA KEV

    Remediation due

    Apply updates per vendor instructions.

  4. Jun 16, 2026 · Catalog

    Updated

    Amcrest cameras and NVR are vulnerable to a stack-based buffer overflow over port 37777. An authenticated remote attacker can abuse this issue to crash the device and possibly execute arbitrary code.

Required action

Apply updates per vendor instructions.

CISA due date May 3, 2022

Affected

  • cpe amcrest/1080-lite 8ch firmwareversion unspecified
  • cpe amcrest/amdv10814-h5 firmwareversion unspecified
  • cpe amcrest/ip2m-841 firmwareversion unspecified
  • cpe amcrest/ip2m-841-v3 firmwareversion unspecified
  • cpe amcrest/ip2m-853ew firmwareversion unspecified
  • cpe amcrest/ip2m-858w firmwareversion unspecified
  • cpe amcrest/ip2m-866ew firmwareversion unspecified
  • cpe amcrest/ip2m-866w firmwareversion unspecified
  • cpe amcrest/ip4m-1053ew firmwareversion unspecified
  • cpe amcrest/ip8m-2454ew firmwareversion unspecified
  • cpe amcrest/ip8m-2493eb firmwareversion unspecified
  • cpe amcrest/ipm-721 firmwareversion unspecified
  • vendor Amcrest Cameras and Network Video Recorder (NVR)version unspecified

Sources

  • CISA KEVCVE-2020-5735

    Amcrest cameras and NVR contain a stack-based buffer overflow vulnerability through port 37777 that allows an unauthenticated, remote attacker to crash the device and possibly execute code.

    cisa.gov
  • CVE.orgCVE-2020-5735

    Official CVE identifier

    cve.org
  • FIRST EPSSCVE-2020-5735

    30-day exploitation probability 36.2%

    first.org
  • Exploit Database48304

    Public archive entry. The exploit body is not stored here.

    exploit-db.com
  • NIST NVDCVE-2020-5735

    Amcrest cameras and NVR are vulnerable to a stack-based buffer overflow over port 37777. An authenticated remote attacker can abuse this issue to crash the device and possibly execute arbitrary code.

    nvd.nist.gov
  • Packet Storm Securityhttp://packetstormsecurity.com/files/157164/Amcrest-Dahua-NVR-Camera-IP2M-841-Denial-Of-Service.html

    Packet Storm link already published on the finding.

    packetstormsecurity.com

References