CVE-2020-5735
Memory Safety in Amcrest 1080-Lite 8Ch Firmware
Raw vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HCVSS and EPSS are reproduced from their sources (NVD, FIRST EPSS). Risk Priority is our own derived reading, not an NVD score.
Summary
CVE-2020-5735 is a high-severity Stack-based Buffer Overflow (CWE-121) vulnerability in Amcrest 1080-Lite 8Ch Firmware. Its CVSS base score is 8.8 (High).
Operationally, exploitation aligns with the MITRE ATT&CK technique Security Account Manager (T1003.002); ranked in the top 2% of CVEs by exploit likelihood; CISA has added it to the Known Exploited Vulnerabilities catalog; a public proof-of-concept is referenced.
Deeper analysis AI-assisted summary
Synthesised by an AI model from the NVD description and linked references — a reading aid, not an authoritative source.
Amcrest cameras and NVR devices contain a stack-based buffer overflow vulnerability, tracked as CVE-2020-5735 and also associated with CWE-121 and CWE-787, that affects the service listening on TCP port 37777. The flaw permits an authenticated remote attacker to supply crafted input that overwrites memory on the stack, leading to a crash or potential arbitrary code execution. The issue carries a CVSS 3.1 base score of 8.8, reflecting network attack vector, low complexity, and low required privileges.
An authenticated remote attacker can connect to port 37777 and trigger the overflow to cause a denial-of-service condition that crashes the device; under favorable conditions the same flaw may be leveraged for arbitrary code execution, giving the attacker control over the affected camera or NVR.
The vulnerability appears in public exploit repositories demonstrating denial-of-service against models such as the Amcrest IP2M-841 and is listed in the CISA Known Exploited Vulnerabilities catalog, confirming observed real-world exploitation. No vendor patch or configuration guidance is detailed in the referenced advisories.
EU & UK References
- 🇪🇺 ENISA EUVD: EUVD-2020-26894
Vulnerability Data
Amcrest cameras and NVR are vulnerable to a stack-based buffer overflow over port 37777. An authenticated remote attacker can abuse this issue to crash the device and possibly execute arbitrary code.
- CWE(s)
- KEV Date Added
- 03 November 2021
Related Threats
MITRE ATT&CK Enterprise Techniques
CVEs Like This One
Affected Assets
Mitigating Controls
Control response
—
—
- 2 hardening rules · 2 OS baselines
—
Likely Mitigating Controls AI
Per-CVE control mapping for this CVE has not run yet; the list below is derived from the weakness types (CWEs) cited in the NVD entry.
Out-of-bounds writes that corrupt control flow or inject shellcode are rendered non-executable by the same memory protections.
Mitigating Controls (NIST CSF 2.0) AI
Derived directly from the weakness types (CWEs) cited in the NVD entry via our AI-authored CWE→CSF cross-walk (authority under review) — links open the control.
Mitigating Controls (ISO/IEC 27001:2022 Annex A) AI
Derived directly from the weakness types (CWEs) cited in the NVD entry via our AI-authored CWE→ISO cross-walk (authority under review) — links open the control.
Hardening callouts derived
Configuration rules from DISA STIG baselines that bear on weaknesses of the type cited by this CVE. Each rule is shown with the relationship its mapping actually records, against the CWE it was authored against. Derived via CVE→CWE over `controls_xwalks` (higher-evidence rows only; rows rated `none` are excluded).
Oracle Linux 8 (1 rule)
- V-248594 OL 8 must implement address space layout randomization (ASLR) to protect its memory from unauthorized code execution. blocks CWE-121
Oracle Linux 9 (1 rule)
- V-271452 OL 9 must use a Linux Security Module configured to enforce limits on system services. blocks CWE-121