CVE-2020-5735

🗓️ 08 Apr 2020 12:42:25Reported by tenableType

Amcrest cameras and NVR vulnerable to stack-based buffer overflow over port 37777

Reporter	Title	Published	Views	Family All 15
0day.today	Amcrest Dahua NVR Camera IP2M-841 - Denial of Service Exploit	8 Apr 202000:00	–	zdt
ATTACKERKB	CVE-2020-5735	8 Apr 202000:00	–	attackerkb
BDU FSTEC	The vulnerability arises from the implementation of the automatic update method for server names in the Dynamic DNS system for domain names in systems using Amcrest IP cameras. This allows a perpetrator to execute arbitrary code or cause a service failure.	1 Dec 202100:00	–	bdu_fstec
Circl	CVE-2020-5735	8 Nov 202108:58	–	circl
CISA KEV Catalog	Amcrest Cameras and NVR Stack-based Buffer Overflow Vulnerability	3 Nov 202100:00	–	cisa_kev
Check Point Advisories	Amcrest Cameras Stack Buffer Overflow (CVE-2020-5735)	23 Nov 202000:00	–	checkpoint_advisories
Cvelist	CVE-2020-5735	8 Apr 202012:42	–	cvelist
Exploit DB	Amcrest Dahua NVR Camera IP2M-841 - Denial of Service (PoC)	8 Apr 202000:00	–	exploitdb
NVD	CVE-2020-5735	8 Apr 202013:15	–	nvd
OSV	CVE-2020-5735	8 Apr 202013:15	–	osv

NVD

Node

amcrest 1080-lite_8ch_firmwareMatch-

AND

amcrest 1080-lite_8chMatch-

Node

amcrest amdv10814-h5_firmwareMatch-

AND

amcrest amdv10814-h5Match-

Node

amcrest ipm-721_firmwareRange<v2.420.ac00.18.r.20200217

AND

amcrest ipm-721Match-

Node

amcrest ip2m-841_firmwareRange<v2.420.ac00.18.r.20200217

AND

amcrest ip2m-841Match-

Node

amcrest ip2m-841-v3_firmwareRange<v2.800.0000000.6.r.200314

AND

amcrest ip2m-841-v3Match-

Node

amcrest ip2m-853ew_firmwareRange<v2.623.00ac004.0.r.200316

AND

amcrest ip2m-853ewMatch-

Node

amcrest ip2m-858w_firmwareRange<v2.623.00ac004.0.r.200316

AND

amcrest ip2m-858wMatch-

Node

amcrest ip2m-866w_firmwareRange<v2.623.00ac004.0.r.200316

AND

amcrest ip2m-866wMatch-

Node

amcrest ip2m-866ew_firmwareRange<v2.623.00ac004.0.r.200316

AND

amcrest ip2m-866ewMatch-

Node

amcrest ip4m-1053ew_firmwareRange<v2.623.00ac004.0.r.200316

AND

amcrest ip4m-1053ewMatch-

Node

amcrest ip8m-2454ew_firmwareRange<v2.622.00ac000.0.r.200320

AND

amcrest ip8m-2454ewMatch-

Node

amcrest ip8m-2493eb_firmwareRange<v2.622.00ac000.0.r.200320

AND

amcrest ip8m-2493ebMatch-

Node

amcrest ip8m-2496eb_firmwareRange<v2.622.00ac000.0.r.200320

AND

amcrest ip8m-2496ebMatch-

Node

amcrest ip8m-2597e_firmwareRange<v2.800.00ac000.0.r.200330

AND

amcrest ip8m-2597eMatch-

Node

amcrest ip8m-mb2546ew_firmwareRange<v2.622.00ac000.0.r.200320

AND

amcrest ip8m-mb2546ewMatch-

Node

amcrest ip8m-mt2544ew_firmwareRange<v2.622.00ac000.0.r.200320

AND

amcrest ip8m-mt2544ewMatch-

Node

amcrest ip8m-t2499ew_firmwareRange<v2.622.00ac000.0.r.200320

AND

amcrest ip8m-t2499ewMatch-

Node

amcrest ipm-hx1_firmwareRange<v2.420.ac00.18.r.20200217

AND

amcrest ipm-hx1Match-

[
  {
    "product": "Amcrest",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "before 2.623.00AC004.0.R.200316, 2.420.AC00.18.R.20200217, 2.800.00AC000.0.R.200330, 2.800.0000000.6.R.200314.bin, 2.622.00AC000.0.R.200320.bin, and 4.000.00AC000.0.R.200218"
      }
    ]
  }
]

Source	Link
tenable	www.tenable.com/security/research/tra-2020-20
packetstormsecurity	www.packetstormsecurity.com/files/157164/Amcrest-Dahua-NVR-Camera-IP2M-841-Denial-Of-Service.html
cisa	www.cisa.gov/known-exploited-vulnerabilities-catalog

17 Jun 2026 03:22Current

9High risk

Vulners AI Score9

CVSS 28

CVSS 3.18.8

EPSS0.35643

SSVC

amcrest nvr vulnerability cve-2020-5735 buffer overflow remote code execution security issue