medium6.5
CVE-2020-5736
Amcrest cameras and NVR are vulnerable to a null pointer dereference over port 37777.
Impact
Amcrest cameras and NVR are vulnerable to a null pointer dereference over port 37777. An authenticated remote attacker can abuse this issue to crash the device.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Amcrest | 1080-Lite 8ch Firmware | All versions |
| Amcrest | Amdv10814-H5 Firmware | All versions |
| Amcrest | Ipm-721 Firmware | before v2.420.ac00.18.r.20200217 |
| Amcrest | Ip2m-841 Firmware | before v2.420.ac00.18.r.20200217 |
| Amcrest | Ip2m-841-V3 Firmware | before v2.800.0000000.6.r.200314 |
| Amcrest | Ip2m-853ew Firmware | before v2.623.00ac004.0.r.200316 |
| Amcrest | Ip2m-858w Firmware | before v2.623.00ac004.0.r.200316 |
| Amcrest | Ip2m-866w Firmware | before v2.623.00ac004.0.r.200316 |
| Amcrest | Ip2m-866ew Firmware | before v2.623.00ac004.0.r.200316 |
| Amcrest | Ip4m-1053ew Firmware | before v2.623.00ac004.0.r.200316 |
| Amcrest | Ip8m-2454ew Firmware | before v2.622.00ac000.0.r.200320 |
| Amcrest | Ip8m-2493eb Firmware | before v2.622.00ac000.0.r.200320 |