CVE-2020-5736: Amcrest 1080-Lite 8ch Firmware

Medium severity, CVSS 6.5. EPSS: 1.6% chance of exploitation in the next 30 days.

Amcrest cameras and NVR are vulnerable to a null pointer dereference over port 37777. An authenticated remote attacker can abuse this issue to crash the device.

Affected products

• Amcrest 1080-Lite 8ch Firmware: affected versions not specified
• Amcrest AMDV10814-h5 Firmware: affected versions not specified
• Amcrest IP2M-841-v3 Firmware: before v2.800.0000000.6.r.200314 (fixed in v2.800.0000000.6.r.200314)
• Amcrest IP2M-841 Firmware: before v2.420.ac00.18.r.20200217 (fixed in v2.420.ac00.18.r.20200217)
• Amcrest IP2M-853ew Firmware: before v2.623.00ac004.0.r.200316 (fixed in v2.623.00ac004.0.r.200316)
• Amcrest IP2M-858w Firmware: before v2.623.00ac004.0.r.200316 (fixed in v2.623.00ac004.0.r.200316)
• Amcrest IP2M-866ew Firmware: before v2.623.00ac004.0.r.200316 (fixed in v2.623.00ac004.0.r.200316)
• Amcrest IP2M-866w Firmware: before v2.623.00ac004.0.r.200316 (fixed in v2.623.00ac004.0.r.200316)
• Amcrest IP4M-1053ew Firmware: before v2.623.00ac004.0.r.200316 (fixed in v2.623.00ac004.0.r.200316)
• Amcrest IP8M-2454ew Firmware: before v2.622.00ac000.0.r.200320 (fixed in v2.622.00ac000.0.r.200320)
• Amcrest IP8M-2493eb Firmware: before v2.622.00ac000.0.r.200320 (fixed in v2.622.00ac000.0.r.200320)
• Amcrest IP8M-2496eb Firmware: before v2.622.00ac000.0.r.200320 (fixed in v2.622.00ac000.0.r.200320)
• Amcrest IP8M-2597e Firmware: before v2.800.00ac000.0.r.200330 (fixed in v2.800.00ac000.0.r.200330)
• Amcrest IP8M-MB2546EW Firmware: before v2.622.00ac000.0.r.200320 (fixed in v2.622.00ac000.0.r.200320)
• Amcrest IP8M-MT2544EW Firmware: before v2.622.00ac000.0.r.200320 (fixed in v2.622.00ac000.0.r.200320)
• Amcrest IP8M-t2499ew Firmware: before v2.622.00ac000.0.r.200320 (fixed in v2.622.00ac000.0.r.200320)
• Amcrest Ipm-721 Firmware: before v2.420.ac00.18.r.20200217 (fixed in v2.420.ac00.18.r.20200217)
• Amcrest Ipm-HX1 Firmware: before v2.420.ac00.18.r.20200217 (fixed in v2.420.ac00.18.r.20200217)

Published 2020-04-08. Last modified 2026-06-17.