NULL pointer dereference in Amcrest
Priority LOW 32CWE-476Published · Updated
Key facts
- Attack vector
- Network
- Privileges required
- Low
- User interaction
- None
- Attack complexity
- Low
- Impact type
- Denial of service
- Confidentiality · integrity · availability
- None · None · High
- Fix status
- Fixed
Attack profile from CVSS 3.1 · NVD. Fix status from CNA. Impact type from CWE-476.
Summary
Amcrest cameras and NVR are vulnerable to a null pointer dereference over port 37777. An authenticated remote attacker can abuse this issue to crash the device.
Why it matters now
EPSS 0.01585 75th percentileScored 2026-11-07
Fix Fixed Amcrest: 2.623.00AC004.0.R.200316
SSVC decision points
Not available: CISA has not published SSVC decision points for this record.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| — | Amcrest | before 2.623.00AC004.0.R.200316; 2.420.AC00.18.R.20200217; 2.800.00AC000.0.R.200330; 2.800.0000000.6.R.200314.bin; 2.622.00AC000.0.R.200320.bin; and 4.000.00AC000.0.R.200218 | 2.623.00AC004.0.R.200316 | Patch available | CNA |
- Amcrest Vendor— Affected before 2.623.00AC004.0.R.200316; 2.420.AC00.18.R.20200217; 2.800.00AC000.0.R.200330; 2.800.0000000.6.R.200314.bin; 2.622.00AC000.0.R.200320.bin; and 4.000.00AC000.0.R.200218 Fixed in 2.623.00AC004.0.R.200316 Patch available CNA
CPE configurations NVD · 36
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:o:amcrest:1080-lite_8ch_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Amcrest |
| cpe:2.3:h:amcrest:1080-lite_8ch:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Amcrest |
| cpe:2.3:o:amcrest:amdv10814-h5_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Amcrest |
| cpe:2.3:h:amcrest:amdv10814-h5:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Amcrest |
| cpe:2.3:o:amcrest:ipm-721_firmware:*:*:*:*:*:*:*:* | before v2.420.ac00.18.r.20200217 | Vulnerable | Amcrest |
| cpe:2.3:h:amcrest:ipm-721:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Amcrest |
| cpe:2.3:o:amcrest:ip2m-841_firmware:*:*:*:*:*:*:*:* | before v2.420.ac00.18.r.20200217 | Vulnerable | Amcrest |
| cpe:2.3:h:amcrest:ip2m-841:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Amcrest |
| cpe:2.3:o:amcrest:ip2m-841-v3_firmware:*:*:*:*:*:*:*:* | before v2.800.0000000.6.r.200314 | Vulnerable | Amcrest |
| cpe:2.3:h:amcrest:ip2m-841-v3:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Amcrest |
- cpe:2.3:o:amcrest:1080-lite_8ch_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Amcrest
- cpe:2.3:h:amcrest:1080-lite_8ch:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Amcrest
- cpe:2.3:o:amcrest:amdv10814-h5_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Amcrest
- cpe:2.3:h:amcrest:amdv10814-h5:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Amcrest
- cpe:2.3:o:amcrest:ipm-721_firmware:*:*:*:*:*:*:*:* Versions before v2.420.ac00.18.r.20200217 Vulnerable ·Amcrest
- cpe:2.3:h:amcrest:ipm-721:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Amcrest
- cpe:2.3:o:amcrest:ip2m-841_firmware:*:*:*:*:*:*:*:* Versions before v2.420.ac00.18.r.20200217 Vulnerable ·Amcrest
- cpe:2.3:h:amcrest:ip2m-841:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Amcrest
- cpe:2.3:o:amcrest:ip2m-841-v3_firmware:*:*:*:*:*:*:*:* Versions before v2.800.0000000.6.r.200314 Vulnerable ·Amcrest
- cpe:2.3:h:amcrest:ip2m-841-v3:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Amcrest
Show 26 more CPE
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:o:amcrest:ip2m-853ew_firmware:*:*:*:*:*:*:*:* | before v2.623.00ac004.0.r.200316 | Vulnerable | Amcrest |
| cpe:2.3:h:amcrest:ip2m-853ew:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Amcrest |
| cpe:2.3:o:amcrest:ip2m-858w_firmware:*:*:*:*:*:*:*:* | before v2.623.00ac004.0.r.200316 | Vulnerable | Amcrest |
| cpe:2.3:h:amcrest:ip2m-858w:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Amcrest |
| cpe:2.3:o:amcrest:ip2m-866w_firmware:*:*:*:*:*:*:*:* | before v2.623.00ac004.0.r.200316 | Vulnerable | Amcrest |
| cpe:2.3:h:amcrest:ip2m-866w:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Amcrest |
| cpe:2.3:o:amcrest:ip2m-866ew_firmware:*:*:*:*:*:*:*:* | before v2.623.00ac004.0.r.200316 | Vulnerable | Amcrest |
| cpe:2.3:h:amcrest:ip2m-866ew:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Amcrest |
| cpe:2.3:o:amcrest:ip4m-1053ew_firmware:*:*:*:*:*:*:*:* | before v2.623.00ac004.0.r.200316 | Vulnerable | Amcrest |
| cpe:2.3:h:amcrest:ip4m-1053ew:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Amcrest |
| cpe:2.3:o:amcrest:ip8m-2454ew_firmware:*:*:*:*:*:*:*:* | before v2.622.00ac000.0.r.200320 | Vulnerable | Amcrest |
| cpe:2.3:h:amcrest:ip8m-2454ew:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Amcrest |
| cpe:2.3:o:amcrest:ip8m-2493eb_firmware:*:*:*:*:*:*:*:* | before v2.622.00ac000.0.r.200320 | Vulnerable | Amcrest |
| cpe:2.3:h:amcrest:ip8m-2493eb:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Amcrest |
| cpe:2.3:o:amcrest:ip8m-2496eb_firmware:*:*:*:*:*:*:*:* | before v2.622.00ac000.0.r.200320 | Vulnerable | Amcrest |
| cpe:2.3:h:amcrest:ip8m-2496eb:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Amcrest |
| cpe:2.3:o:amcrest:ip8m-2597e_firmware:*:*:*:*:*:*:*:* | before v2.800.00ac000.0.r.200330 | Vulnerable | Amcrest |
| cpe:2.3:h:amcrest:ip8m-2597e:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Amcrest |
| cpe:2.3:o:amcrest:ip8m-mb2546ew_firmware:*:*:*:*:*:*:*:* | before v2.622.00ac000.0.r.200320 | Vulnerable | Amcrest |
| cpe:2.3:h:amcrest:ip8m-mb2546ew:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Amcrest |
| cpe:2.3:o:amcrest:ip8m-mt2544ew_firmware:*:*:*:*:*:*:*:* | before v2.622.00ac000.0.r.200320 | Vulnerable | Amcrest |
| cpe:2.3:h:amcrest:ip8m-mt2544ew:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Amcrest |
| cpe:2.3:o:amcrest:ip8m-t2499ew_firmware:*:*:*:*:*:*:*:* | before v2.622.00ac000.0.r.200320 | Vulnerable | Amcrest |
| cpe:2.3:h:amcrest:ip8m-t2499ew:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Amcrest |
| cpe:2.3:o:amcrest:ipm-hx1_firmware:*:*:*:*:*:*:*:* | before v2.420.ac00.18.r.20200217 | Vulnerable | Amcrest |
| cpe:2.3:h:amcrest:ipm-hx1:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Amcrest |
- cpe:2.3:o:amcrest:ip2m-853ew_firmware:*:*:*:*:*:*:*:* Versions before v2.623.00ac004.0.r.200316 Vulnerable ·Amcrest
- cpe:2.3:h:amcrest:ip2m-853ew:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Amcrest
- cpe:2.3:o:amcrest:ip2m-858w_firmware:*:*:*:*:*:*:*:* Versions before v2.623.00ac004.0.r.200316 Vulnerable ·Amcrest
- cpe:2.3:h:amcrest:ip2m-858w:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Amcrest
- cpe:2.3:o:amcrest:ip2m-866w_firmware:*:*:*:*:*:*:*:* Versions before v2.623.00ac004.0.r.200316 Vulnerable ·Amcrest
- cpe:2.3:h:amcrest:ip2m-866w:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Amcrest
- cpe:2.3:o:amcrest:ip2m-866ew_firmware:*:*:*:*:*:*:*:* Versions before v2.623.00ac004.0.r.200316 Vulnerable ·Amcrest
- cpe:2.3:h:amcrest:ip2m-866ew:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Amcrest
- cpe:2.3:o:amcrest:ip4m-1053ew_firmware:*:*:*:*:*:*:*:* Versions before v2.623.00ac004.0.r.200316 Vulnerable ·Amcrest
- cpe:2.3:h:amcrest:ip4m-1053ew:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Amcrest
- cpe:2.3:o:amcrest:ip8m-2454ew_firmware:*:*:*:*:*:*:*:* Versions before v2.622.00ac000.0.r.200320 Vulnerable ·Amcrest
- cpe:2.3:h:amcrest:ip8m-2454ew:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Amcrest
- cpe:2.3:o:amcrest:ip8m-2493eb_firmware:*:*:*:*:*:*:*:* Versions before v2.622.00ac000.0.r.200320 Vulnerable ·Amcrest
- cpe:2.3:h:amcrest:ip8m-2493eb:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Amcrest
- cpe:2.3:o:amcrest:ip8m-2496eb_firmware:*:*:*:*:*:*:*:* Versions before v2.622.00ac000.0.r.200320 Vulnerable ·Amcrest
- cpe:2.3:h:amcrest:ip8m-2496eb:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Amcrest
- cpe:2.3:o:amcrest:ip8m-2597e_firmware:*:*:*:*:*:*:*:* Versions before v2.800.00ac000.0.r.200330 Vulnerable ·Amcrest
- cpe:2.3:h:amcrest:ip8m-2597e:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Amcrest
- cpe:2.3:o:amcrest:ip8m-mb2546ew_firmware:*:*:*:*:*:*:*:* Versions before v2.622.00ac000.0.r.200320 Vulnerable ·Amcrest
- cpe:2.3:h:amcrest:ip8m-mb2546ew:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Amcrest
- cpe:2.3:o:amcrest:ip8m-mt2544ew_firmware:*:*:*:*:*:*:*:* Versions before v2.622.00ac000.0.r.200320 Vulnerable ·Amcrest
- cpe:2.3:h:amcrest:ip8m-mt2544ew:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Amcrest
- cpe:2.3:o:amcrest:ip8m-t2499ew_firmware:*:*:*:*:*:*:*:* Versions before v2.622.00ac000.0.r.200320 Vulnerable ·Amcrest
- cpe:2.3:h:amcrest:ip8m-t2499ew:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Amcrest
- cpe:2.3:o:amcrest:ipm-hx1_firmware:*:*:*:*:*:*:*:* Versions before v2.420.ac00.18.r.20200217 Vulnerable ·Amcrest
- cpe:2.3:h:amcrest:ipm-hx1:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Amcrest
Remediation
- Fix · CNA Amcrest Fixed in 2.623.00AC004.0.R.200316
Timeline
- 2026-10-02 Threatist record created from CVE-2020-5736
- 2026-10-03 Alias added: GHSA-65jf-2vcm-9v6q
References
More Amcrest 1080-lite 8ch Firmware vulnerabilities
- TI-2020-04663 Stack-based buffer overflow in Amcrest KEVCVSS 3.1HIGH 8.8
Sources
- CVE-2020-5736 · CVE Program
- CVE-2020-5736 · NVD
- FIRST EPSS
- GHSA-65jf-2vcm-9v6q · GitHub Advisory Database · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences