ACTIVELY EXPLOITED
CVE-2020-5735: Amcrest Cameras and NVR Stack-based Buffer Overflow Vulnerability
| Vendor | Amcrest |
|---|---|
| Product | Cameras and Network Video Recorder (NVR) |
| Actively exploited | Yes |
| Added to CISA KEV | 3 Nov 2021 |
| CISA federal deadline | 3 May 2022 |
| Weakness (CWE) | CWE-121 |
Required action (CISA's text)
Apply updates per vendor instructions.
Description (NVD)
Amcrest cameras and NVR contain a stack-based buffer overflow vulnerability through port 37777 that allows an unauthenticated, remote attacker to crash the device and possibly execute code.
SOURCES
Data from NVD, CISA KEV, FIRST EPSS and vendor advisories. Updated 10 Nov 2026.