CVE-2020-5736

Severity: medium (CVSS 6.5 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.6% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2020-04-08 · updated 2026-06-17
Weakness: CWE-476

Description

Amcrest cameras and NVR are vulnerable to a null pointer dereference over port 37777. An authenticated remote attacker can abuse this issue to crash the device.

Affected products

Amcrest 1080-Lite 8Ch Firmware: all versions
Amcrest Amdv10814-H5 Firmware: all versions
Amcrest Ip2M-841-V3 Firmware: before v2.800.0000000.6.r.200314 — fixed in v2.800.0000000.6.r.200314
Amcrest Ip2M-841 Firmware: before v2.420.ac00.18.r.20200217 — fixed in v2.420.ac00.18.r.20200217
Amcrest Ip2M-853Ew Firmware: before v2.623.00ac004.0.r.200316 — fixed in v2.623.00ac004.0.r.200316
Amcrest Ip2M-858W Firmware: before v2.623.00ac004.0.r.200316 — fixed in v2.623.00ac004.0.r.200316
Amcrest Ip2M-866Ew Firmware: before v2.623.00ac004.0.r.200316 — fixed in v2.623.00ac004.0.r.200316
Amcrest Ip2M-866W Firmware: before v2.623.00ac004.0.r.200316 — fixed in v2.623.00ac004.0.r.200316
Amcrest Ip4M-1053Ew Firmware: before v2.623.00ac004.0.r.200316 — fixed in v2.623.00ac004.0.r.200316
Amcrest Ip8M-2454Ew Firmware: before v2.622.00ac000.0.r.200320 — fixed in v2.622.00ac000.0.r.200320
Amcrest Ip8M-2493Eb Firmware: before v2.622.00ac000.0.r.200320 — fixed in v2.622.00ac000.0.r.200320
Amcrest Ip8M-2496Eb Firmware: before v2.622.00ac000.0.r.200320 — fixed in v2.622.00ac000.0.r.200320
Amcrest Ip8M-2597E Firmware: before v2.800.00ac000.0.r.200330 — fixed in v2.800.00ac000.0.r.200330
Amcrest Ip8M-Mb2546Ew Firmware: before v2.622.00ac000.0.r.200320 — fixed in v2.622.00ac000.0.r.200320
Amcrest Ip8M-Mt2544Ew Firmware: before v2.622.00ac000.0.r.200320 — fixed in v2.622.00ac000.0.r.200320
Amcrest Ip8M-T2499Ew Firmware: before v2.622.00ac000.0.r.200320 — fixed in v2.622.00ac000.0.r.200320
Amcrest Ipm-721 Firmware: before v2.420.ac00.18.r.20200217 — fixed in v2.420.ac00.18.r.20200217
Amcrest Ipm-Hx1 Firmware: before v2.420.ac00.18.r.20200217 — fixed in v2.420.ac00.18.r.20200217

How to fix

Upgrade to a fixed version: Amcrest Ip2M-841-V3 Firmware v2.800.0000000.6.r.200314; Amcrest Ip2M-841 Firmware v2.420.ac00.18.r.20200217; Amcrest Ip2M-853Ew Firmware v2.623.00ac004.0.r.200316; Amcrest Ip2M-858W Firmware v2.623.00ac004.0.r.200316; Amcrest Ip2M-866Ew Firmware v2.623.00ac004.0.r.200316; Amcrest Ip2M-866W Firmware v2.623.00ac004.0.r.200316; Amcrest Ip4M-1053Ew Firmware v2.623.00ac004.0.r.200316; Amcrest Ip8M-2454Ew Firmware v2.622.00ac000.0.r.200320; Amcrest Ip8M-2493Eb Firmware v2.622.00ac000.0.r.200320; Amcrest Ip8M-2496Eb Firmware v2.622.00ac000.0.r.200320; Amcrest Ip8M-2597E Firmware v2.800.00ac000.0.r.200330; Amcrest Ip8M-Mb2546Ew Firmware v2.622.00ac000.0.r.200320. Check the vendor advisory for mitigations.

References

Get alerted when CVE-2020-5736 or the next vulnerability affects your stack