CVE-2020-5735: Amcrest Cameras and NVR Stack-based Buffer Overflow Vulnerability

High severity, CVSS 8.8. Actively exploited: in CISA KEV since 2021-11-03. EPSS: 36.2% chance of exploitation in the next 30 days.

Amcrest cameras and NVR are vulnerable to a stack-based buffer overflow over port 37777. An authenticated remote attacker can abuse this issue to crash the device and possibly execute arbitrary code.

Affected products

• Amcrest 1080-Lite 8ch Firmware: affected versions not specified
• Amcrest AMDV10814-h5 Firmware: affected versions not specified
• Amcrest IP2M-841-v3 Firmware: before v2.800.0000000.6.r.200314 (fixed in v2.800.0000000.6.r.200314)
• Amcrest IP2M-841 Firmware: before v2.420.ac00.18.r.20200217 (fixed in v2.420.ac00.18.r.20200217)
• Amcrest IP2M-853ew Firmware: before v2.623.00ac004.0.r.200316 (fixed in v2.623.00ac004.0.r.200316)
• Amcrest IP2M-858w Firmware: before v2.623.00ac004.0.r.200316 (fixed in v2.623.00ac004.0.r.200316)
• Amcrest IP2M-866ew Firmware: before v2.623.00ac004.0.r.200316 (fixed in v2.623.00ac004.0.r.200316)
• Amcrest IP2M-866w Firmware: before v2.623.00ac004.0.r.200316 (fixed in v2.623.00ac004.0.r.200316)
• Amcrest IP4M-1053ew Firmware: before v2.623.00ac004.0.r.200316 (fixed in v2.623.00ac004.0.r.200316)
• Amcrest IP8M-2454ew Firmware: before v2.622.00ac000.0.r.200320 (fixed in v2.622.00ac000.0.r.200320)
• Amcrest IP8M-2493eb Firmware: before v2.622.00ac000.0.r.200320 (fixed in v2.622.00ac000.0.r.200320)
• Amcrest IP8M-2496eb Firmware: before v2.622.00ac000.0.r.200320 (fixed in v2.622.00ac000.0.r.200320)
• Amcrest IP8M-2597e Firmware: before v2.800.00ac000.0.r.200330 (fixed in v2.800.00ac000.0.r.200330)
• Amcrest IP8M-MB2546EW Firmware: before v2.622.00ac000.0.r.200320 (fixed in v2.622.00ac000.0.r.200320)
• Amcrest IP8M-MT2544EW Firmware: before v2.622.00ac000.0.r.200320 (fixed in v2.622.00ac000.0.r.200320)
• Amcrest IP8M-t2499ew Firmware: before v2.622.00ac000.0.r.200320 (fixed in v2.622.00ac000.0.r.200320)
• Amcrest Ipm-721 Firmware: before v2.420.ac00.18.r.20200217 (fixed in v2.420.ac00.18.r.20200217)
• Amcrest Ipm-HX1 Firmware: before v2.420.ac00.18.r.20200217 (fixed in v2.420.ac00.18.r.20200217)

Published 2020-04-08. Last modified 2026-06-17.