CVE-2020-5736
MEDIUM
6.5
CVSS Score
Published: April 8, 2020 at 12:42 PM UTC
Updated: June 17, 2026 at 03:22 AM UTC
36 products affected across 1 vendorAMDV10814 H5 FirmwareIpm 721 FirmwareIpm HX1 Firmware
Using Amcrest by N/A?
Get instant alerts when new vulnerabilities affect Amcrest - before attackers find them.
Real-time alertsTrack your software stackFree plan available
Severity
MEDIUM6.5
Exploit prediction
EPSS 2%
Description
Amcrest cameras and NVR are vulnerable to a null pointer dereference over port 37777. An authenticated remote attacker can abuse this issue to crash the device.
Affected
Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.
v < v2.420.ac00.18.r.20200217
Affected range stops below v2.420.ac00.18.r.20200217, so it looks safe — our inference, not a vendor statement
amcrest-ip2m-841 (same device)
v < v2.800.0000000.6.r.200314
Affected range stops below v2.800.0000000.6.r.200314, so it looks safe — our inference, not a vendor statement
amcrest-ip2m-841-v3 (same device)
v < v2.623.00ac004.0.r.200316
Affected range stops below v2.623.00ac004.0.r.200316, so it looks safe — our inference, not a vendor statement
amcrest-ip2m-853ew (same device)
v < v2.623.00ac004.0.r.200316
Affected range stops below v2.623.00ac004.0.r.200316, so it looks safe — our inference, not a vendor statement
amcrest-ip2m-858w (same device)
v < v2.623.00ac004.0.r.200316
Affected range stops below v2.623.00ac004.0.r.200316, so it looks safe — our inference, not a vendor statement
amcrest-ip2m-866ew (same device)
v < v2.623.00ac004.0.r.200316
Affected range stops below v2.623.00ac004.0.r.200316, so it looks safe — our inference, not a vendor statement
amcrest-ip2m-866w (same device)
v < v2.623.00ac004.0.r.200316
Affected range stops below v2.623.00ac004.0.r.200316, so it looks safe — our inference, not a vendor statement
amcrest-ip4m-1053ew (same device)
v < v2.622.00ac000.0.r.200320
Affected range stops below v2.622.00ac000.0.r.200320, so it looks safe — our inference, not a vendor statement
amcrest-ip8m-2454ew (same device)
Remediation
No guide yetNo remediation guidance has been written for this CVE yet, and no fixed version or vendor advisory is recorded against it.
References (1)
x_refsource_MISCThird Party Advisory
Source: [email protected]
https://www.tenable.com/security/research/tra-2020-20CVSS
- Attack Vector
- NETWORK
- Complexity
- LOW
- Privileges
- LOW
- User Interaction
- NONE
- Scope
- UNCHANGED
- Confidentiality
- NONE
- Integrity
- NONE
- Availability
- HIGH
Vector?
Quick Info
StatusMODIFIED
CWE
CWE-476
Get alerted
Stop reading CVE feeds looking for your own stack
Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.
Free plan, no card