CVE-2020-7222 - CVE House
Back to Database
Status published Medium CVE-2020-7222

An issue was discovered in Amcrest Web Server 2.520.AC00.18.R 2017-06-29...

Vulnerability Description

An issue was discovered in Amcrest Web Server 2.520.AC00.18.R 2017-06-29 WEB 3.2.1.453504. The login page responds with JavaScript when one tries to authenticate. An attacker who changes the result parameter (to true) in this JavaScript code can bypass authentication and achieve limited privileges (ability to see every option but not modify them).

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2020-7222

Credits & Attribution

No credits recorded in the NVD database.

References

More from amcrest

View All →
CVE-2018-16546
Amcrest networked devices use the same hardcoded SSL private key...
Medium 5.9
CVE-2017-8230
On Amcrest IPM-721S V2.420.AC00.16.R.20160909 devices, the users on the device...
High 8.8
CVE-2017-8229
Amcrest IPM-721S V2.420.AC00.16.R.20160909 devices allow an unauthenticated attacker to download...
Critical 9.8
CVE-2017-8228
Amcrest IPM-721S V2.420.AC00.16.R.20160909 devices mishandle reboots within the past two...
High 8.8
CVE-2017-8227
Amcrest IPM-721S V2.420.AC00.16.R.20160909 devices have a timeout policy to wait...
Critical 9.8

Affected Vendor

Affected Software

web server
Vulnerable Versions:
2.520.ac00.18.r

Timeline

Official Publish: January 17th, 2020
Last Modified: August 4th, 2024
Added to House: July 21st, 2026

CVSS Vectors

V3: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.