CVE-2020-5735
HIGH KEVAmcrest Cameras and NVR - Authenticated Stack-based Buffer Overflow via Port 37777
Title source: llmExploitation Summary
CVE-2020-5735 is actively exploited and listed in the CISA Known Exploited Vulnerabilities (KEV) catalog, added November 3, 2021. EIP tracks 1 public exploit from researchers including Jacob Baines.
AI-analyzed exploit summary This exploit targets a stack overflow vulnerability in Amcrest/Dahua NVR cameras via port 37777. It authenticates using a challenge-response mechanism and triggers a crash by sending an oversized 'Protocol' command.
Description
Amcrest cameras and NVR are vulnerable to a stack-based buffer overflow over port 37777. An authenticated remote attacker can abuse this issue to crash the device and possibly execute arbitrary code.
Exploits (1)
This exploit targets a stack overflow vulnerability in Amcrest/Dahua NVR cameras via port 37777. It authenticates using a challenge-response mechanism and triggers a crash by sending an oversized 'Protocol' command.
References (3)
Scores
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H