VULNERABILITY INTELLIGENCE

CVE-2020-5735

CVSS score8.8 HIGH

EPSS probability36.22%

CISA KEVKnown exploited vulnerability

Published2020-04-08

Last modified2026-06-17

CVSS vectorCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Known Exploited Vulnerability

Amcrest Cameras and NVR Stack-based Buffer Overflow Vulnerability

Vendor / product: Amcrest / Cameras and Network Video Recorder (NVR)

Description

Amcrest cameras and NVR are vulnerable to a stack-based buffer overflow over port 37777. An authenticated remote attacker can abuse this issue to crash the device and possibly execute arbitrary code.

Weakness classification

CWE-121: Stack-based Buffer Overflow
CWE-787: Out-of-bounds Write

Primary references

vulnreport@tenable.com — Exploit, Third Party Advisory, VDB Entry
vulnreport@tenable.com — Third Party Advisory
af854a3a-2127-422b-91ae-364da2661108 — Exploit, Third Party Advisory, VDB Entry
af854a3a-2127-422b-91ae-364da2661108 — Third Party Advisory
134c704f-9b21-4f2e-91b3-4a467353bcc0 — US Government Resource