Amcrest · Cameras and Network Video Recorder (NVR)
CVE-2020-5735
Amcrest Cameras and NVR Stack-based Buffer Overflow Vulnerability
What it is
Amcrest cameras and NVR are vulnerable to a stack-based buffer overflow over port 37777. An authenticated remote attacker can abuse this issue to crash the device and possibly execute arbitrary code.
CISA: Amcrest cameras and NVR contain a stack-based buffer overflow vulnerability through port 37777 that allows an unauthenticated, remote attacker to crash the device and possibly execute code.
What to do
Apply updates per vendor instructions.
Deadline for US federal agencies: May 3, 2022
Sources: Known Exploited Vulnerabilities (CISA, public domain), CVE records (cve.org) and EPSS (FIRST). The chance of attacks is the EPSS estimate that someone will try to exploit the flaw in the next 30 days.