CameraRisk

Amcrest IP8M-T2499EW

cpe:2.3:*:amcrest:ip8m-t2499ew

Vendor
Amcrest
Device type
Not derivable from CPE
Published vulnerabilities
2
In CISA KEV
1 KEV
Affected versions recorded
1
Data last built
5 September 2026

Security summary

2 published vulnerabilities affect this product according to NVD. 1 of them is in CISA's Known Exploited Vulnerabilities catalogue, which means confirmed exploitation in the wild.

Exploited: CVE-2020-5735.

Experimental risk indicator

Components are shown separately and deliberately not combined into a single number. Two of the six inputs below have no public source for any product on this site; a composite built without them would be a guess wearing a decimal point.

Known vulnerability count 2 bar scaled to 20
Highest published severity 8.8 HIGH
Confirmed exploitation yes 1 in CISA KEV
Exploitation probability EPSS 36.2% (highest)
Lifecycle status no source
Deployed exposure not measurable from public data

Published vulnerabilities

CVEPublishedCVSS SeverityEPSSFlags
CVE-2020-5736 2020-04-08 6.5 medium 1.6%
CVE-2020-5735 2020-04-08 8.8 high 36.2% KEVExploit ref

Affected versions

Version strings recorded by NVD against this product. These are the versions named in CPE match rules, not a complete firmware history — a version absent here has not been cleared, it has simply never been named in a CVE record.

Ranges: < v2.622.00ac000.0.r.200320

What this page does not tell you

There is no public dataset of end-of-support dates, default credentials or shipped network services for this product, so those fields are absent rather than estimated. Whether any of these vulnerabilities is exploitable in your deployment depends on firmware version, configuration and network position — none of which is knowable from here.

This record is not unique. 5 other Amcrest products carry an identical published record — the same 2 vulnerabilities and the same recorded affected versions. That is how NVD files them, not a claim that the products are the same. Because this page cannot say anything its siblings cannot, it is kept out of search results and the Amcrest page carries the family.

For the vendor's own advisories, see Amcrest.

Other Amcrest products

Vulnerability records from the National Vulnerability Database, matched to this product by CPE. Exploitation status from CISA KEV 2026.09.04. Exploitation probability from FIRST EPSS, 2026-09-04. Product name derived mechanically from the CPE identifier. See methodology.