Null Pointer Dereference in Amcrest Cameras and NVR
CVE-2020-5736

6.5MEDIUM

Key Information:

Vendor

Amcrest

Status
Amcrest
Vendor
CVE Published:
8 April 2020

What is CVE-2020-5736?

Amcrest cameras and NVR are susceptible to a null pointer dereference vulnerability over TCP port 37777. An authenticated remote attacker can exploit this issue to force the device to crash, potentially disrupting surveillance operations. This poses a significant risk to users relying on these devices for security monitoring. Ensuring up-to-date firmware and applying necessary patches is crucial to mitigate this vulnerability.

Affected Version(s)

Amcrest before 2.623.00AC004.0.R.200316

Amcrest 2.420.AC00.18.R.20200217

Amcrest 2.800.00AC000.0.R.200330

References

https://www.tenable.com/security/research/tra-2020-20
x_refsource_MISC

CVSS V3.1

Score:
6.5
Severity:
MEDIUM
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.
CVE-2020-5736 : Null Pointer Dereference in Amcrest Cameras and NVR