Skip to content
brandefense.io
Request A Demo
Vulnerability Intelligence

CVE-2020-5735

HighExploitedPublic exploit

Amcrest cameras and NVR are vulnerable to a stack-based buffer overflow over port 37777.

Published Apr 8, 2020 · Updated Oct 31, 2025

Key Facts

Patch immediately
  • CVE-2020-5735 is a high-severity vulnerability (CVSS 8.8 v3.1) affecting 1080-Lite 8ch Firmware (Amcrest), Amdv10814-H5 Firmware (Amcrest), Ip2m-841 Firmware (Amcrest) and 16 more products.
  • It is exploited in the wild, listed in CISA KEV, Industry KEV feed, CIRCL KEV, ENISA EUVD since Nov 3, 2021. Public exploit code is available.
  • EPSS estimates a 36% probability of exploitation in the next 30 days.
  • Fixed versions are available, including Ip2m-841 Firmware v2.420.ac00.18.r.20200217, Ip2m-841-V3 Firmware v2.800.0000000.6.r.200314, Ip2m-853ew Firmware v2.623.00ac004.0.r.200316.
  • Brandefense priority: patch immediately, because it is listed as exploited in the wild.

CVSS v3.1

8.8

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS (30-day exploit likelihood)

36%

Higher than 98.4% of all scored CVEs

Exploited in the wild

Yes

4 catalog listings

Public exploit code

Available

Proof-of-concept or weaponized module

Get the full CVE-2020-5735 brief as a PDF

Every affected product and fixed release, exploitation status and a first 24 hours response checklist, emailed within minutes.

Description

Amcrest cameras and NVR are vulnerable to a stack-based buffer overflow over port 37777. An authenticated remote attacker can abuse this issue to crash the device and possibly execute arbitrary code.

Known-Exploited Catalog Listings

CatalogAddedRemediation dueRansomware use
CISA KEVNov 3, 2021May 3, 2022Not reported
Industry KEV feedNov 3, 2021May 3, 2022Not reported
CIRCL KEVNov 3, 2021May 3, 2022Not reported
ENISA EUVDNov 3, 2021n/aNot reported

Required action: Apply updates per vendor instructions.

Affected Products

19 affected entries in total
ProductAffected versionsFixed in
1080-Lite 8ch FirmwareAmcrestSee advisoryn/a
Amdv10814-H5 FirmwareAmcrestSee advisoryn/a
Ip2m-841 FirmwareAmcrestSee advisoryv2.420.ac00.18.r.20200217
Ip2m-841-V3 FirmwareAmcrestSee advisoryv2.800.0000000.6.r.200314
Ip2m-853ew FirmwareAmcrestSee advisoryv2.623.00ac004.0.r.200316
14 more affected products in the full CVE brief

Patched Releases

Ip2m-841 Firmware

v2.420.ac00.18.r.20200217

Ip2m-841-V3 Firmware

v2.800.0000000.6.r.200314

Ip2m-853ew Firmware

v2.623.00ac004.0.r.200316

Ip2m-858w Firmware

v2.623.00ac004.0.r.200316

Ip2m-866ew Firmware

v2.623.00ac004.0.r.200316

Ip2m-866w Firmware

v2.623.00ac004.0.r.200316

Ip4m-1053ew Firmware

v2.623.00ac004.0.r.200316

Ip8m-2454ew Firmware

v2.622.00ac000.0.r.200320

Ip8m-2493eb Firmware

v2.622.00ac000.0.r.200320

Ip8m-2496eb Firmware

v2.622.00ac000.0.r.200320

Ip8m-2597e Firmware

v2.800.00ac000.0.r.200330

Ip8m-Mb2546ew Firmware

v2.622.00ac000.0.r.200320

Ip8m-Mt2544ew Firmware

v2.622.00ac000.0.r.200320

Ip8m-T2499ew Firmware

v2.622.00ac000.0.r.200320

Ipm-721 Firmware

v2.420.ac00.18.r.20200217

Ipm-Hx1 Firmware

v2.420.ac00.18.r.20200217

Timeline

  1. Publicly disclosed

    Apr 8, 2020

  2. Added to CISA KEV

    Nov 3, 2021

  3. Added to Industry KEV feed

    Nov 3, 2021

  4. Added to CIRCL KEV

    Nov 3, 2021

  5. Added to ENISA EUVD

    Nov 3, 2021

  6. Last updated

    Oct 31, 2025

Weakness Type

  • CWE-121 Stack-based Buffer Overflow
  • CWE-787 Out-of-bounds Write

References

FAQ

Common Questions.

Is CVE-2020-5735 Running On Your Attack Surface?

Brandefense maps vulnerabilities like this one to your internet-facing assets and tells you exactly where to patch.

Request A Demo