Search/CVE-2020-5735
● CVE — High

CVE-2020-5735

VendoramcrestProduct1080-lite 8ch firmware, amdv10814-h5 firmware, ip2m-841-v3 firmware, ip2m-841 firmware, ip2m-853ew firmware, ip2m-858w firmware, ip2m-866ew firmware, ip2m-866w firmware, ip4m-1053ew firmware, ip8m-2454ew firmware, ip8m-2493eb firmware, ip8m-2496eb firmware, ip8m-2597e firmware, ip8m-mb2546ew firmware, ip8m-mt2544ew firmware, ip8m-t2499ew firmware, ipm-721 firmware, ipm-hx1 firmwareDiscoveredApr 8, 2020UpdatedOct 31, 2025

Amcrest cameras and NVR are vulnerable to a stack-based buffer overflow over port 37777. An authenticated remote attacker can abuse this issue to crash the device and possibly execute arbitrary code.

CVSS v3.1
8.8 HIGH
EPSS
36.2%
probability of exploitation in 30 days
CISA KEV
Listed
confirmed active exploitation
News coverage
0
sources referencing this CVE
Related IOCs
0
seen in the same coverage
CVSS v3.1 Detail
Attack VectorNETWORK
Attack ComplexityLOW
Privileges RequiredLOW
User InteractionNONE
ScopeUNCHANGED
ConfidentialityHIGH
IntegrityHIGH
AvailabilityHIGH
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Connections
19 relationships
Timeline
disclosure → media coverage
Apr 8, 2020
Disclosure — published as a CVE record. · last revised by NVD Oct 31, 2025