Amcrest

Records12All Threatist records

Exploited (KEV)1In CISA KEV

CVSS critical4CVSS 9.0–10.0

CVSS high4CVSS 7.0–8.9

Exploited now

Amcrest records in CISA KEV

TI-2020-04663 Amcrest Cameras and NVR Stack-based Buffer Overflow Vulnerability CRITICAL 97KEV 2021-11-03

Components

Products in the NVD configurations · select one to filter the records

Ipm-721s Firmware 6 records HIGH 1080-lite 8ch Firmware 2 records CRITICAL Amdv10814-h5 Firmware 2 records CRITICAL Ip2m-841-v3 Firmware 2 records CRITICAL Ip2m-841 Firmware 2 records CRITICAL Ip2m-853ew Firmware 2 records CRITICAL Ip2m-858w Firmware 2 records CRITICAL Ip2m-866ew Firmware 2 records CRITICAL

Records

6 records in Ipm-721s Firmware · all components

TI-2017-05804 CVE-2017-8229 · GHSA-4xj7-ghpf-q4fg

Amcrest IPM-721S V2.420.AC00.16.R.20160909 devices allow an unauthenticated attacker to…

HIGH 81

Amcrest IPM-721S V2.420.AC00.16.R.20160909 devices allow an unauthenticated attacker to download the administrative credentials.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.74243 Published 2019-07-03 No fix listed CWE-255

TI-2017-09994 CVE-2017-13719 · GHSA-xpwc-9c3w-mmc4

The Amcrest IPM-721S Amcrest_IPC-AWXX_Eng_N_V2.420.AC00.17.R.20170322 allows HTTP…

MEDIUM 49

The Amcrest IPM-721S Amcrest_IPC-AWXX_Eng_N_V2.420.AC00.17.R.20170322 allows HTTP requests that permit enabling various functionalities of the camera by using HTTP APIs, instead of the web management interface that is pr…

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.0446 Published 2019-07-03 No fix listed CWE-119

TI-2017-05802 CVE-2017-8227 · GHSA-9j32-qqv8-8pjg

Amcrest IPM-721S V2.420.AC00.16.R.20160909 devices have a timeout policy to wait for 5…

MEDIUM 49

Amcrest IPM-721S V2.420.AC00.16.R.20160909 devices have a timeout policy to wait for 5 minutes in case 30 incorrect password attempts are detected using the Web and HTTP API interface provided by the device.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.04111 Published 2019-07-03 No fix listed CWE-254

TI-2017-05801 CVE-2017-8226 · GHSA-g3mq-ffvf-8f3r

Amcrest IPM-721S V2.420.AC00.16.R.20160909 devices have default credentials that are…

MEDIUM 49

Amcrest IPM-721S V2.420.AC00.16.R.20160909 devices have default credentials that are hardcoded in the firmware and can be extracted by anyone who reverses the firmware to identify them.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.03799 Published 2019-07-03 No fix listed CWE-798

TI-2017-05803 CVE-2017-8228 · GHSA-jhmv-phvh-7v48

Amcrest IPM-721S V2.420.AC00.16.R.20160909 devices mishandle reboots within the past two…

MEDIUM 43

Amcrest IPM-721S V2.420.AC00.16.R.20160909 devices mishandle reboots within the past two hours.

CVSS 3.0HIGH 8.8 Network No auth User interaction EPSS 0.02597 Published 2019-07-03 No fix listed CWE-264

TI-2017-05805 CVE-2017-8230 · GHSA-9j3g-g39v-6mhg

On Amcrest IPM-721S V2.420.AC00.16.R.20160909 devices, the users on the device are…

MEDIUM 41

On Amcrest IPM-721S V2.420.AC00.16.R.20160909 devices, the users on the device are divided into 2 groups "admin" and "user".

CVSS 3.0HIGH 8.8 Network Low privileges No interaction EPSS 0.01631 Published 2019-07-03 No fix listed CWE-264

Open these records in search →

Critical	4
High	4
Medium	4
Low	0
No CVSS	0