Amcrest kayıtları
amcrest üreticisine ait 11 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 1 · %9,1
- Silahlaştırılmış
- 1 · %9,1
- Pre-auth RCE
- 0
- Düzeltme kaydı olan
- %0
- Yayından KEV’e ortanca
- 574 gün
Tekrar eden sınıflar
- CWE-798 Use of Hard-coded Credentials2
- CWE-264 Permissions, Privileges, and Access Controls2
- CWE-254 7PK - Security Features1
- CWE-255 Credentials Management Errors1
- CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer1
- CWE-287 Improper Authentication1
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWETüm kayıtlar
11 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
76Bu hafta | CVE-2020-5735Silahlaştırılmış | Amcrest cameras and NVR are vulnerable to a stack-based buffer overflow over port 37777.amcrest · 1080-lite 8ch firmware · CWE-121 | Yüksek8,8 | KEV | %36,2 | 8 Nis 2020 |
61Bu hafta | CVE-2017-8229Kavram kanıtı | Amcrest IPM-721S V2.420.AC00.16.R.20160909 devices allow an unauthenticated attacker to download the administrative credentials.amcrest · ipm-721s firmware · CWE-255 | Kritik9,8 | — | %74,2 | 3 Tem 2019 |
40Planlayın | CVE-2017-13719İstismar yok | The Amcrest IPM-721S Amcrest_IPC-AWXX_Eng_N_V2.420.AC00.17.R.20170322 allows HTTP requests that permit enabling various functionalities of tamcrest · ipm-721s firmware · CWE-119 | Kritik9,8 | — | %4,4 | 3 Tem 2019 |
40Planlayın | CVE-2017-8227İstismar yok | Amcrest IPM-721S V2.420.AC00.16.R.20160909 devices have a timeout policy to wait for 5 minutes in case 30 incorrect password attempts are deamcrest · ipm-721s firmware · CWE-254 | Kritik9,8 | — | %4,1 | 3 Tem 2019 |
40Planlayın | CVE-2017-8226İstismar yok | Amcrest IPM-721S V2.420.AC00.16.R.20160909 devices have default credentials that are hardcoded in the firmware and can be extracted by anyonamcrest · ipm-721s firmware · CWE-798 | Kritik9,8 | — | %3,7 | 3 Tem 2019 |
38İzleyin | CVE-2019-3948Kavram kanıtı | The Amcrest IP2M-841B V2.520.AC00.18.R, Dahua IPC-XXBXX V2.622.0000000.9.R, Dahua IPC HX5X3X and HX4X3X V2.800.0000008.0.R, Dahua DH-IPC HX8amcrest · ip2m-841b firmware · CWE-306 | Yüksek7,5 | — | %25,0 | 29 Tem 2019 |
36İzleyin | CVE-2017-8228İstismar yok | Amcrest IPM-721S V2.420.AC00.16.R.20160909 devices mishandle reboots within the past two hours.amcrest · ipm-721s firmware · CWE-264 | Yüksek8,8 | — | %2,5 | 3 Tem 2019 |
35İzleyin | CVE-2017-8230İstismar yok | On Amcrest IPM-721S V2.420.AC00.16.R.20160909 devices, the users on the device are divided into 2 groups "admin" and "user".amcrest · ipm-721s firmware · CWE-264 | Yüksek8,8 | — | %1,6 | 3 Tem 2019 |
26İzleyin | CVE-2020-5736İstismar yok | Amcrest cameras and NVR are vulnerable to a null pointer dereference over port 37777.amcrest · 1080-lite 8ch firmware · CWE-476 | Orta6,5 | — | %1,5 | 8 Nis 2020 |
23İzleyin | CVE-2018-16546İstismar yok | Amcrest networked devices use the same hardcoded SSL private key across different customers' installations, which allows remote attackers toamcrest · amcrest ipc-hx1x3x-lexus eng n amcrest · CWE-798 | Orta5,9 | — | %1,0 | 5 Eyl 2018 |
21İzleyin | CVE-2020-7222İstismar yok | An issue was discovered in Amcrest Web Server 2.520.AC00.18.R 2017-06-29 WEB 3.2.1.453504.amcrest · web server · CWE-287 | Orta5,3 | — | %1,2 | 17 Oca 2020 |
- CVE-2020-573576Bu hafta
Amcrest cameras and NVR are vulnerable to a stack-based buffer overflow over port 37777.
YüksekCVSS 8,8KEVSilahlaştırılmışEPSS %36amcrest · 1080-lite 8ch firmware8 Nis 2020
- CVE-2017-822961Bu hafta
Amcrest IPM-721S V2.420.AC00.16.R.20160909 devices allow an unauthenticated attacker to download the administrative credentials.
KritikCVSS 9,8Kavram kanıtıEPSS %74amcrest · ipm-721s firmware3 Tem 2019
- CVE-2017-1371940Planlayın
The Amcrest IPM-721S Amcrest_IPC-AWXX_Eng_N_V2.420.AC00.17.R.20170322 allows HTTP requests that permit enabling various functionalities of t
KritikCVSS 9,8İstismar yokEPSS %4amcrest · ipm-721s firmware3 Tem 2019
- CVE-2017-822740Planlayın
Amcrest IPM-721S V2.420.AC00.16.R.20160909 devices have a timeout policy to wait for 5 minutes in case 30 incorrect password attempts are de
KritikCVSS 9,8İstismar yokEPSS %4amcrest · ipm-721s firmware3 Tem 2019
- CVE-2017-822640Planlayın
Amcrest IPM-721S V2.420.AC00.16.R.20160909 devices have default credentials that are hardcoded in the firmware and can be extracted by anyon
KritikCVSS 9,8İstismar yokEPSS %3amcrest · ipm-721s firmware3 Tem 2019
- CVE-2019-394838İzleyin
The Amcrest IP2M-841B V2.520.AC00.18.R, Dahua IPC-XXBXX V2.622.0000000.9.R, Dahua IPC HX5X3X and HX4X3X V2.800.0000008.0.R, Dahua DH-IPC HX8
YüksekCVSS 7,5Kavram kanıtıEPSS %25amcrest · ip2m-841b firmware29 Tem 2019
- CVE-2017-822836İzleyin
Amcrest IPM-721S V2.420.AC00.16.R.20160909 devices mishandle reboots within the past two hours.
YüksekCVSS 8,8İstismar yokEPSS %2amcrest · ipm-721s firmware3 Tem 2019
- CVE-2017-823035İzleyin
On Amcrest IPM-721S V2.420.AC00.16.R.20160909 devices, the users on the device are divided into 2 groups "admin" and "user".
YüksekCVSS 8,8İstismar yokEPSS %1amcrest · ipm-721s firmware3 Tem 2019
- CVE-2020-573626İzleyin
Amcrest cameras and NVR are vulnerable to a null pointer dereference over port 37777.
OrtaCVSS 6,5İstismar yokEPSS %1amcrest · 1080-lite 8ch firmware8 Nis 2020
- CVE-2018-1654623İzleyin
Amcrest networked devices use the same hardcoded SSL private key across different customers' installations, which allows remote attackers to
OrtaCVSS 5,9İstismar yokEPSS %1amcrest · amcrest ipc-hx1x3x-lexus eng n amcrest5 Eyl 2018
- CVE-2020-722221İzleyin
An issue was discovered in Amcrest Web Server 2.520.AC00.18.R 2017-06-29 WEB 3.2.1.453504.
OrtaCVSS 5,3İstismar yokEPSS %1amcrest · web server17 Oca 2020