Amcrest IP8M-2493eb Firmware vulnerabilities

2 CVEs affecting Amcrest IP8M-2493eb Firmware, 1 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2020-5736, published 2020-04-08.

More from Amcrest.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2020-5735: Amcrest Cameras and NVR Stack-based Buffer Overflow Vulnerability, published 2020-04-08. High severity, CVSS 8.8. Actively exploited: in CISA KEV since 2021-11-03. EPSS: 36.2% chance of exploitation in the next 30 days. Amcrest cameras and NVR are vulnerable to a stack-based buffer overflow over port 37777. An authenticated remote attacker can abuse this issue to crash the device and possibly execute arbitrary code.
• CVE-2020-5736, published 2020-04-08. Medium severity, CVSS 6.5. EPSS: 1.6% chance of exploitation in the next 30 days. Amcrest cameras and NVR are vulnerable to a null pointer dereference over port 37777. An authenticated remote attacker can abuse this issue to crash the device.