Vulnerabilities > Amcrest > Medium

DATE CVE VULNERABILITY TITLE RISK
2020-04-08 CVE-2020-5736 NULL Pointer Dereference vulnerability in Amcrest products
Amcrest cameras and NVR are vulnerable to a null pointer dereference over port 37777.
network
low complexity
amcrest CWE-476
6.5
2020-01-18 CVE-2020-7222 Improper Authentication vulnerability in Amcrest web Server 2.520.Ac00.18.R
An issue was discovered in Amcrest Web Server 2.520.AC00.18.R 2017-06-29 WEB 3.2.1.453504.
network
low complexity
amcrest CWE-287
5.3
2018-09-05 CVE-2018-16546 Use of Hard-coded Credentials vulnerability in Amcrest Ipc-Hx1X3X-Lexus ENG N Amcrest V2.420.Ac01.3.R.20180206
Amcrest networked devices use the same hardcoded SSL private key across different customers' installations, which allows remote attackers to defeat cryptographic protection mechanisms by leveraging knowledge of this key from another installation, as demonstrated by Amcrest_IPC-HX1X3X-LEXUS_Eng_N_AMCREST_V2.420.AC01.3.R.20180206.
network
high complexity
amcrest CWE-798
5.9