Amcrest records

11 published records for vendor amcrest.

Researcher profile

Entered KEV: 1 · 9.1%
Weaponized: 1 · 9.1%
Pre-auth RCE: 0
With a fix record: 0%
Median publish → KEV: 574 days

Records by year

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

Attack profile

All records

11 records

CVE records
Action	CVE	Vulnerability	Severity	KEV	EPSS	Published
76This week	CVE-2020-5735Weaponized	Amcrest cameras and NVR are vulnerable to a stack-based buffer overflow over port 37777.amcrest · 1080-lite 8ch firmware · CWE-121 RCE Memory safety	High8.8	KEV	36.2%	Apr 8, 2020
61This week	CVE-2017-8229Proof of concept	Amcrest IPM-721S V2.420.AC00.16.R.20160909 devices allow an unauthenticated attacker to download the administrative credentials.amcrest · ipm-721s firmware · CWE-255 Pre-auth Hard-coded credentials	Critical9.8	—	74.2%	Jul 3, 2019
40Plan	CVE-2017-13719No exploit	The Amcrest IPM-721S Amcrest_IPC-AWXX_Eng_N_V2.420.AC00.17.R.20170322 allows HTTP requests that permit enabling various functionalities of tamcrest · ipm-721s firmware · CWE-119 Pre-auth Memory safety	Critical9.8	—	4.4%	Jul 3, 2019
40Plan	CVE-2017-8227No exploit	Amcrest IPM-721S V2.420.AC00.16.R.20160909 devices have a timeout policy to wait for 5 minutes in case 30 incorrect password attempts are deamcrest · ipm-721s firmware · CWE-254 Pre-auth	Critical9.8	—	4.1%	Jul 3, 2019
40Plan	CVE-2017-8226No exploit	Amcrest IPM-721S V2.420.AC00.16.R.20160909 devices have default credentials that are hardcoded in the firmware and can be extracted by anyonamcrest · ipm-721s firmware · CWE-798 Pre-auth Hard-coded credentials	Critical9.8	—	3.7%	Jul 3, 2019
38Monitor	CVE-2019-3948Proof of concept	The Amcrest IP2M-841B V2.520.AC00.18.R, Dahua IPC-XXBXX V2.622.0000000.9.R, Dahua IPC HX5X3X and HX4X3X V2.800.0000008.0.R, Dahua DH-IPC HX8amcrest · ip2m-841b firmware · CWE-306 Pre-auth Auth bypass	High7.5	—	25.0%	Jul 29, 2019
36Monitor	CVE-2017-8228No exploit	Amcrest IPM-721S V2.420.AC00.16.R.20160909 devices mishandle reboots within the past two hours.amcrest · ipm-721s firmware · CWE-264 Pre-auth	High8.8	—	2.5%	Jul 3, 2019
35Monitor	CVE-2017-8230No exploit	On Amcrest IPM-721S V2.420.AC00.16.R.20160909 devices, the users on the device are divided into 2 groups "admin" and "user".amcrest · ipm-721s firmware · CWE-264	High8.8	—	1.6%	Jul 3, 2019
26Monitor	CVE-2020-5736No exploit	Amcrest cameras and NVR are vulnerable to a null pointer dereference over port 37777.amcrest · 1080-lite 8ch firmware · CWE-476 Memory safety Denial of service	Medium6.5	—	1.5%	Apr 8, 2020
23Monitor	CVE-2018-16546No exploit	Amcrest networked devices use the same hardcoded SSL private key across different customers' installations, which allows remote attackers toamcrest · amcrest ipc-hx1x3x-lexus eng n amcrest · CWE-798 Pre-auth Hard-coded credentials	Medium5.9	—	1.0%	Sep 5, 2018
21Monitor	CVE-2020-7222No exploit	An issue was discovered in Amcrest Web Server 2.520.AC00.18.R 2017-06-29 WEB 3.2.1.453504.amcrest · web server · CWE-287 Pre-auth Auth bypass	Medium5.3	—	1.2%	Jan 17, 2020

CVE-2020-5735
76This week
Amcrest cameras and NVR are vulnerable to a stack-based buffer overflow over port 37777.
HighCVSS 8.8KEVWeaponizedEPSS 36%
- RCE
- Memory safety
amcrest · 1080-lite 8ch firmwareApr 8, 2020
CVE-2017-8229
61This week
Amcrest IPM-721S V2.420.AC00.16.R.20160909 devices allow an unauthenticated attacker to download the administrative credentials.
CriticalCVSS 9.8Proof of conceptEPSS 74%
- Pre-auth
- Hard-coded credentials
amcrest · ipm-721s firmwareJul 3, 2019
CVE-2017-13719
40Plan
The Amcrest IPM-721S Amcrest_IPC-AWXX_Eng_N_V2.420.AC00.17.R.20170322 allows HTTP requests that permit enabling various functionalities of t
CriticalCVSS 9.8No exploitEPSS 4%
- Pre-auth
- Memory safety
amcrest · ipm-721s firmwareJul 3, 2019
CVE-2017-8227
40Plan
Amcrest IPM-721S V2.420.AC00.16.R.20160909 devices have a timeout policy to wait for 5 minutes in case 30 incorrect password attempts are de
CriticalCVSS 9.8No exploitEPSS 4%
- Pre-auth
amcrest · ipm-721s firmwareJul 3, 2019
CVE-2017-8226
40Plan
Amcrest IPM-721S V2.420.AC00.16.R.20160909 devices have default credentials that are hardcoded in the firmware and can be extracted by anyon
CriticalCVSS 9.8No exploitEPSS 3%
- Pre-auth
- Hard-coded credentials
amcrest · ipm-721s firmwareJul 3, 2019
CVE-2019-3948
38Monitor
The Amcrest IP2M-841B V2.520.AC00.18.R, Dahua IPC-XXBXX V2.622.0000000.9.R, Dahua IPC HX5X3X and HX4X3X V2.800.0000008.0.R, Dahua DH-IPC HX8
HighCVSS 7.5Proof of conceptEPSS 25%
- Pre-auth
- Auth bypass
amcrest · ip2m-841b firmwareJul 29, 2019
CVE-2017-8228
36Monitor
Amcrest IPM-721S V2.420.AC00.16.R.20160909 devices mishandle reboots within the past two hours.
HighCVSS 8.8No exploitEPSS 2%
- Pre-auth
amcrest · ipm-721s firmwareJul 3, 2019
CVE-2017-8230
35Monitor
On Amcrest IPM-721S V2.420.AC00.16.R.20160909 devices, the users on the device are divided into 2 groups "admin" and "user".
HighCVSS 8.8No exploitEPSS 1%
amcrest · ipm-721s firmwareJul 3, 2019
CVE-2020-5736
26Monitor
Amcrest cameras and NVR are vulnerable to a null pointer dereference over port 37777.
MediumCVSS 6.5No exploitEPSS 1%
- Memory safety
- Denial of service
amcrest · 1080-lite 8ch firmwareApr 8, 2020
CVE-2018-16546
23Monitor
Amcrest networked devices use the same hardcoded SSL private key across different customers' installations, which allows remote attackers to
MediumCVSS 5.9No exploitEPSS 1%
- Pre-auth
- Hard-coded credentials
amcrest · amcrest ipc-hx1x3x-lexus eng n amcrestSep 5, 2018
CVE-2020-7222
21Monitor
An issue was discovered in Amcrest Web Server 2.520.AC00.18.R 2017-06-29 WEB 3.2.1.453504.
MediumCVSS 5.3No exploitEPSS 1%
- Pre-auth
- Auth bypass
amcrest · web serverJan 17, 2020