CVE-2020-5735

Amcrest cameras and NVRs have an unauthenticated remote stack-based buffer overflow on port 37777 that can crash the device and execute code.

An unauthenticated remote attacker can exploit this stack-based buffer overflow to crash the device and execute arbitrary code, posing a severe risk to DIB organizations relying on these devices for physical security or network monitoring. The vulnerability is actively exploited in the wild (KEV), indicating that attackers are already leveraging it, which could lead to device compromise, data exfiltration, or use as a pivot point for further network attacks. DIB organizations must immediately patch these devices or replace them to prevent exploitation and maintain compliance with security requirements.

Shame score — The vulnerability is actively exploited in the wild, allowing unauthenticated remote code execution, which is a severe and avoidable failure for a security-critical device.