CVE-2020-5735
Amcrest cameras and NVR are vulnerable to a stack-based buffer overflow over port 37777. An...
Amcrest cameras and NVR are vulnerable to a stack-based buffer overflow over port 37777. An authenticated remote attacker can abuse this issue to crash the device and possibly execute arbitrary code.
Attack profile
How easy it is to exploit
- Attack vector
- Network
- Complexity
- Low
- Privileges needed
- Low
- User interaction
- None
What an attacker can affect
- Confidentiality
- High
- Integrity
- High
- Availability
- High
Exploit likelihood
What each source reports
NVD Score used
Amcrest cameras and NVR are vulnerable to a stack-based buffer overflow over port 37777. An authenticated remote attacker can abuse this issue to crash the device and possibly execute arbitrary code.
- Record
CVE-2020-5735- CVSS 3.1
- 8.8 High
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H - CVSS 2.0
- 8.0 High
AV:N/AC:L/Au:S/C:P/I:P/A:C - Weakness
- CWE-121, CWE-787
- Updated
- 2026-11-02
CVE List
Amcrest cameras and NVR are vulnerable to a stack-based buffer overflow over port 37777. An authenticated remote attacker can abuse this issue to crash the device and possibly execute arbitrary code.
- Record
CVE-2020-5735- CVSS 3.1
- 8.8 High
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H - Weakness
- CWE-121
- Updated
- 2026-11-02
EUVDEUVD-2020-26894
Amcrest cameras and NVR are vulnerable to a stack-based buffer overflow over port 37777. An authenticated remote attacker can abuse this issue to crash the device and possibly execute arbitrary code.
- Record
EUVD-2020-26894- CVSS 3.1
- 8.8 High
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
GitHub AdvisoriesGHSA-q9mh-3fx2-4gj3
Amcrest cameras and NVR are vulnerable to a stack-based buffer overflow over port 37777. An...
Amcrest cameras and NVR are vulnerable to a stack-based buffer overflow over port 37777. An authenticated remote attacker can abuse this issue to crash the device and possibly execute arbitrary code.
- Record
GHSA-q9mh-3fx2-4gj3- CVSS 3.1
- 8.8 High
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H - Weakness
- CWE-121, CWE-787
- Updated
- 2026-11-02
CISA KEV No score
Amcrest Cameras and NVR Stack-based Buffer Overflow Vulnerability
Amcrest cameras and NVR contain a stack-based buffer overflow vulnerability through port 37777 that allows an unauthenticated, remote attacker to crash the device and possibly execute code.
- Record
CVE-2020-5735- Weakness
- CWE-121
- Updated
- 2026-11-02
Affected products
- amcrest 1080-lite 8ch firmware
- amcrest amdv10814-h5 firmware
- amcrest cameras and network video recorder (nvr)
- amcrest ip2m-841-v3 firmware
- amcrest ip2m-841 firmware
- amcrest ip2m-853ew firmware
- amcrest ip2m-858w firmware
- amcrest ip2m-866ew firmware
- amcrest ip2m-866w firmware
- amcrest ip4m-1053ew firmware
- amcrest ip8m-2454ew firmware
- amcrest ip8m-2493eb firmware
Public exploits
Links only. Every CVE stores no exploit code.
| Source | Link | Date |
|---|---|---|
| Exploit-DB | Amcrest Dahua NVR Camera IP2M-841 - Denial of Service (PoC) | 2020-04-08 |
History
| Recorded | Changed | Sources |
|---|---|---|
| exploitation | ||
| first indexed | CVE List, EUVD, Exploit-DB, GitHub Advisories, CISA KEV, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2020-5735 is a high vulnerability (CVSS 8.8) in Amcrest 1080-lite 8ch Firmware, published April 8, 2020. CISA lists it as known to be exploited, since November 3, 2021. EUVD reports exploitation since November 3, 2021. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 36.2%, the 98th percentile. No source names a fixed version.