Amcrest Ipm-721s Firmware — known CVE vulnerabilities

Every CVE whose affected-product data names Amcrest Ipm-721s Firmware, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (6)

• CVE-2017-13719 — CVSS 9.8 (critical): The Amcrest IPM-721S Amcrest_IPC-AWXX_Eng_N_V2.420.AC00.17.R.20170322 allows HTTP requests that permit enabling various functionalities of…
• CVE-2017-8226 — CVSS 9.8 (critical): Amcrest IPM-721S V2.420.AC00.16.R.20160909 devices have default credentials that are hardcoded in the firmware and can be extracted by…
• CVE-2017-8227 — CVSS 9.8 (critical): Amcrest IPM-721S V2.420.AC00.16.R.20160909 devices have a timeout policy to wait for 5 minutes in case 30 incorrect password attempts are…
• CVE-2017-8229 — CVSS 9.8 (critical): Amcrest IPM-721S V2.420.AC00.16.R.20160909 devices allow an unauthenticated attacker to download the administrative credentials. If the…
• CVE-2017-8228 — CVSS 8.8 (high): Amcrest IPM-721S V2.420.AC00.16.R.20160909 devices mishandle reboots within the past two hours. Amcrest cloud services does not perform a…
• CVE-2017-8230 — CVSS 8.8 (high): On Amcrest IPM-721S V2.420.AC00.16.R.20160909 devices, the users on the device are divided into 2 groups "admin" and "user". However, as a…