Read the docs

Amcrest

Records12All Threatist records
Exploited (KEV)1In CISA KEV
CVSS critical4CVSS 9.0–10.0
CVSS high4CVSS 7.0–8.9

Exploited now

Amcrest records in CISA KEV
TI-2020-04663 Amcrest Cameras and NVR Stack-based Buffer Overflow Vulnerability Priority CRITICAL 97KEV 2021-11-03

Components

Products in the NVD configurations · select one to filter the records
Ipm-721s Firmware 6 records HIGH 1080-lite 8ch Firmware 2 records CRITICAL Amdv10814-h5 Firmware 2 records CRITICAL Ip2m-841-v3 Firmware 2 records CRITICAL Ip2m-841 Firmware 2 records CRITICAL Ip2m-853ew Firmware 2 records CRITICAL Ip2m-858w Firmware 2 records CRITICAL Ip2m-866ew Firmware 2 records CRITICAL

Records

12 records

TI-2020-04663 CVE-2020-5735 · GHSA-q9mh-3fx2-4gj3

Stack-based buffer overflow in Amcrest

Priority CRITICAL 97KEV

Amcrest cameras and NVR are vulnerable to a stack-based buffer overflow over port 37777.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.36217 Published 2020-04-08 No fix listed CWE-121
TI-2024-12035 CVE-2024-12984 · GHSA-m78g-7p88-f9x9

Amcrest IP2M-841B Web Interface webCapsConfig information disclosure

Priority HIGH 70

A vulnerability classified as problematic has been found in Amcrest IP2M-841B, IP2M-841W, IPC-IP2M-841B, IPC-IP3M-943B, IPC-IP3M-943S, IPC-IP3M-HX2B and IPC-IPM-721S up to 20241211.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.00609 Published 2024-12-27 No fix listed CWE-200
TI-2019-02954 CVE-2019-3948 · GHSA-f9fm-89ph-x8pr

Missing authentication in Dahua IPC-XXBXX

Priority MEDIUM 54

The Amcrest IP2M-841B V2.520.AC00.18.R, Dahua IPC-XXBXX V2.622.0000000.9.R, Dahua IPC HX5X3X and HX4X3X V2.800.0000008.0.R, Dahua DH-IPC HX883X and DH-IPC-HX863X V2.622.0000000.7.R, Dahua DH-SD4XXXXX V2.623.0000000.7.R,…

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.25018 Published 2019-07-29 No fix listed CWE-306
TI-2017-09994 CVE-2017-13719 · GHSA-xpwc-9c3w-mmc4

The Amcrest IPM-721S Amcrest_IPC-AWXX_Eng_N_V2.420.AC00.17.R.20170322 allows HTTP…

Priority MEDIUM 49

The Amcrest IPM-721S Amcrest_IPC-AWXX_Eng_N_V2.420.AC00.17.R.20170322 allows HTTP requests that permit enabling various functionalities of the camera by using HTTP APIs, instead of the web management interface that is pr…

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.0446 Published 2019-07-03 No fix listed CWE-119
TI-2020-04664 CVE-2020-5736 · GHSA-65jf-2vcm-9v6q

NULL pointer dereference in Amcrest

Priority LOW 32

Amcrest cameras and NVR are vulnerable to a null pointer dereference over port 37777.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.01585 Published 2020-04-08 Fixed in 2.623.00AC004.0.R.200316 CWE-476
TI-2018-11867 CVE-2018-16546 · GHSA-c5gc-77wf-jm29

Amcrest networked devices use the same hardcoded SSL private key across different…

Priority LOW 28

Amcrest networked devices use the same hardcoded SSL private key across different customers' installations, which allows remote attackers to defeat cryptographic protection mechanisms by leveraging knowledge of this key…

CVSS 3.0MEDIUM 5.9 Network No auth No interaction EPSS 0.01001 Published 2018-09-05 No fix listed CWE-798
Open these records in search →