Amcrest Cameras and NVR Stack-based Buffer Overflow Vulnerability
Amcrest · Cameras and Network Video Recorder (NVR)
Date added (CISA)
2021-11-03
Remediation due
2022-05-03
Known ransomware use
Not indicated
Remediation priority
P2 — past CISA due date
Description
Amcrest cameras and NVR contain a stack-based buffer overflow vulnerability through port 37777 that allows an unauthenticated, remote attacker to crash the device and possibly execute code.