- Vendor / Project
- Amcrest
- Product
- Cameras and Network Video Recorder (NVR)
- Date added
- Nov 3, 2021
- Due date
- May 3, 2022
- Known ransomware use
- Unknown
- CWEs
- CWE-121
Description
Amcrest cameras and NVR contain a stack-based buffer overflow vulnerability through port 37777 that allows an unauthenticated, remote attacker to crash the device and possibly execute code.
Required action
Apply updates per vendor instructions.