Vulnerability · Published Apr 8, 2020 · Assigned by tenable

CVE-2020-5736

Medium 6.5

In plain English

A medium-severity null pointer dereference in Amcrest. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 1.6% (higher than 76% of all known vulnerabilities).

Severity (CVSS NVD)6.5Medium

Exploit odds (30 days)1.6%top 24.3% of all CVEs

Exploited in the wildNo reportsnot in CISA KEV

Attack toolingNoneno public tooling known

Official description

Amcrest cameras and NVR are vulnerable to a null pointer dereference over port 37777. An authenticated remote attacker can abuse this issue to crash the device.

Affected products (as reported)

Vendor	Product	Versions
n/a	Amcrest	before 2.623.00AC004.0.R.2003162.420.AC00.18.R.202002172.800.00AC000.0.R.2003302.800.0000000.6.R.200314.bin2.622.00AC000.0.R.200320.binand 4.000.00AC000.0.R.200218

Weakness: CWE-476

References

https://www.tenable.com/security/research/tra-2020-20 x_refsource_MISC