PT-2020-19475 · Amcrest · Amcrest Web Server

Published 2020-01-17 · Updated 2020-01-29 · CVE-2020-7222

Positive Technologies (AI Summary)

CVSS v3.1

5.3

Medium

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions Amcrest Web Server version 2.520.AC00.18.R 2017-06-29 WEB 3.2.1.453504

Description An issue was discovered in the login page of the Amcrest Web Server, where it responds with JavaScript when attempting to authenticate. An attacker can bypass authentication by modifying the result parameter in the JavaScript code to true, achieving limited privileges. This allows the attacker to view every option but not modify them.

Recommendations For Amcrest Web Server version 2.520.AC00.18.R 2017-06-29 WEB 3.2.1.453504, as a temporary workaround, consider restricting access to the login page until a patch is available. Avoid using the modified result parameter in the JavaScript code to prevent exploitation. At the moment, there is no information about a newer version that contains a fix for this issue.

Exploit

Fix

Improper Authentication

Weakness Enumeration

CWE-287

Related Identifiers

CVE-2020-7222

Affected Products

Amcrest Web Server

References · 4

• 🔥 https://sku11army.blogspot.com/2020/01/amcrest-2520ac0018r-login-bypass.html · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2020-7222 · Security Note
• https://osv.dev/vulnerability/CVE-2020-7222 · Vendor Advisory
• https://t.me/cvenotify/326 · Telegram Post