Actively exploited · Published Apr 8, 2020 · Assigned by tenable
CVE-2020-5735
High 8.8 Exploited
In plain English
A high-severity stack buffer overflow in Amcrest. Attackers are actively exploiting it in the wild (listed by CISA on November 3, 2021). The chance it is exploited in the next 30 days is estimated at 36.2% (higher than 98% of all known vulnerabilities). Apply updates per vendor instructions.
Severity (CVSS 3.1)8.8High
Exploit odds (30 days)36.2%top 1.5% of all CVEs
Exploited in the wildYesCISA KEV since Nov 3, 2021
Attack toolingNoneno public tooling known
CISA guidance
Apply updates per vendor instructions.
Federal agencies must remediate by May 3, 2022.
Official description
Amcrest cameras and NVR are vulnerable to a stack-based buffer overflow over port 37777. An authenticated remote attacker can abuse this issue to crash the device and possibly execute arbitrary code.
Affected products (as reported)
Weakness: CWE-121 · Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H