CVE-2020-5735VulnerabilityPublished 11/03/2021Updated 10/24/2026
CVE-2020-5735: Amcrest Cameras and NVR Stack-based Buffer Overflow Vulnerability
Affects Amcrest Cameras and Network Video Recorder (NVR)Source CISA KEV
Severity
HighNo CVSS score published yet
- Exploitation
Actively exploited – in CISA KEV since 11/03/2021
- KEV deadline
- 05/03/2022
- EPSS
- 36.2% chance of exploitation in 30 days – higher than 98% of CVEs
What to do
CISA required action
Apply updates per vendor instructions.
Description
Amcrest cameras and Network Video Recorders (NVR) have a stack-based buffer overflow vulnerability accessible via port 37777. This flaw allows an unauthenticated remote attacker to crash the device and potentially execute arbitrary code. The vulnerability is known to be exploited in the wild, indicating active threat usage. No specific affected versions or patches are provided in the available data.