# CVE-2020-5735: Amcrest Cameras and NVR Stack-based Buffer Overflow Vulnerability

Source: https://junglewise.ai/threats/cve-2020-5735-amcrest-cameras-and-nvr-stack-based-buffer-overflow-vulnerability  
Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats  
Published: 2021-11-03. Updated: 2026-05-10  
License: CC BY 4.0 with a link back

CVE-2020-5735 · Severity: critical · CVSS 8.8 · Exploited in the wild · Published 2021-11-03

Amcrest cameras and NVR devices are vulnerable to a stack-based buffer overflow on port 37777. A remote authenticated attacker can exploit this to cause a denial-of-service (crash) or potentially execute arbitrary code on the device.

## Quick answers

**Is CVE-2020-5735 exploited in the wild?** Yes. CVE-2020-5735 is known to be exploited in the wild, first recorded on 3 November 2021. Treat it as urgent.

**How severe is CVE-2020-5735?** Critical severity, with a CVSS score of 8.8, published 3 November 2021.

**Which products and versions are affected?** Amcrest IP2M-841-V3 Firmware < v2.800.0000000.6.r.200314; Amcrest IP2M-841 Firmware < v2.420.ac00.18.r.20200217; Amcrest IP2M-853EW Firmware < v2.623.00ac004.0.r.200316; Amcrest IP8M-2454EW Firmware < v2.622.00ac000.0.r.200320; and 2 more.

**Is there a fix for CVE-2020-5735?** No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.

**How is CVE-2020-5735 attacked?** It is attacked over the network, in a network appliance.

**Am I affected by CVE-2020-5735?** Check whether you run Amcrest Cameras or Amcrest Network Video Recorder (NVR). Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

## Affected products

- Amcrest IP2M-841-V3 Firmware < v2.800.0000000.6.r.200314
- Amcrest IP2M-841 Firmware < v2.420.ac00.18.r.20200217
- Amcrest IP2M-853EW Firmware < v2.623.00ac004.0.r.200316
- Amcrest IP8M-2454EW Firmware < v2.622.00ac000.0.r.200320
- Amcrest IP8M-2597E Firmware < v2.800.00ac000.0.r.200330
- Amcrest NVR Firmware

## Timeline

- 2020-04-09: disclosed: Initial analysis by NIST
- 2021-11-03: kev added: Added to CISA Known Exploited Vulnerabilities Catalog