PatchTheCVEamcrest vulnerabilities
Recent CVEs affecting amcrest products. 11 tracked.
amcrest has 11 tracked vulnerabilities, 4 critical and 1 exploited in the wild (CISA KEV). A fixed release or vendor patch exists for 8. Most recent: 2020-04-08. Highest priority: CVE-2020-5735 (score 85/100).
- CVE-2020-7222 MEDIUM 5.3 DOWNGRADE An issue was discovered in Amcrest Web Server 2.520.AC00.18.R 2017-06-29 WEB 3.2.1.453504
- CVE-2020-5736 MEDIUM 6.5 MITIGATE MITIGATE Amcrest cameras and NVR are vulnerable to a null pointer dereference over port 37777
- CVE-2020-5735 HIGH 8.8 EXPLOITED MITIGATE MITIGATE Amcrest Cameras and NVR Stack-based Buffer Overflow Vulnerability
- CVE-2019-3948 HIGH 7.5 MITIGATE UPGRADE The Amcrest IP2M-841B V2.520.AC00.18.R, Dahua IPC-XXBXX V2.622.0000000.9.R, Dahua IPC HX5X3X and HX4X3X V2.800
- CVE-2018-16546 MEDIUM 5.9 MITIGATE Amcrest networked devices use the same hardcoded SSL private key across different customers' installations, wh
- CVE-2017-8230 HIGH 8.8 UPGRADE On Amcrest IPM-721S V2.420.AC00.16.R.20160909 devices, the users on the device are divided into 2 groups "admi
- CVE-2017-8229 CRITICAL 9.8 UPGRADE Amcrest IPM-721S V2.420.AC00.16.R.20160909 devices allow an unauthenticated attacker to download the administr
- CVE-2017-8228 HIGH 8.8 UPGRADE Amcrest IPM-721S V2.420.AC00.16.R.20160909 devices mishandle reboots within the past two hours
- CVE-2017-8227 CRITICAL 9.8 UPGRADE Amcrest IPM-721S V2.420.AC00.16.R.20160909 devices have a timeout policy to wait for 5 minutes in case 30 inco
- CVE-2017-8226 CRITICAL 9.8 UPGRADE Amcrest IPM-721S V2.420.AC00.16.R.20160909 devices have default credentials that are hardcoded in the firmware
- CVE-2017-13719 CRITICAL 9.8 MITIGATE The Amcrest IPM-721S Amcrest_IPC-AWXX_Eng_N_V2.420.AC00.17.R.20170322 allows HTTP requests that permit enablin
FAQ
How do I fix amcrest vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is amcrest being exploited right now?
Yes: 1 amcrest CVE is on the CISA Known Exploited Vulnerabilities list, so patch it first.
Which amcrest CVE should I patch first?
CVE-2020-5735 currently ranks highest (85/100): Amcrest Cameras and NVR Stack-based Buffer Overflow Vulnerability.