CVE-2020-7222

An issue was discovered in Amcrest Web Server 2.520.AC00.18.R 2017-06-29 WEB 3.2.1.453504. The login page responds with JavaScript when one tries to authenticate. An attacker who changes the result parameter (to true) in this JavaScript code can bypass authentication and achieve limited privileges (ability to see every option but not modify them).

• CWE-287

• https://sku11army.blogspot.com/2020/01/amcrest-2520ac0018r-login-bypass.htmlExploit, Third Party Advisory
• https://sku11army.blogspot.com/2020/01/amcrest-2520ac0018r-login-bypass.htmlExploit, Third Party Advisory

Published

Jan 18, 2020

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2020-7216An ni_dhcp4_parse_response memory leak in openSUSE wicked 0.…7.5
• CVE-2020-7217An ni_dhcp4_fsm_process_dhcp4_packet memory leak in openSUSE…7.5
• CVE-2020-7218HashiCorp Nomad and Nonad Enterprise up to 0.10.2 HTTP/RPC s…7.5
• CVE-2020-7219HashiCorp Consul and Consul Enterprise up to 1.6.2 HTTP/RPC …7.5
• CVE-2020-7220HashiCorp Vault Enterprise 0.11.0 through 1.3.1 fails, in ce…7.5
• CVE-2020-7221mysql_install_db in MariaDB 10.4.7 through 10.4.11 allows pr…7.8
• CVE-2020-7224The Aviatrix OpenVPN client through 2.5.7 on Linux, macOS, a…9.8
• CVE-2020-7226CiphertextHeader.java in Cryptacular 1.2.3, as used in Apere…7.5
• CVE-2020-7227Westermo MRD-315 1.7.3 and 1.7.4 devices have an information…6.5
• CVE-2020-7228The Calculated Fields Form plugin through 1.0.353 for WordPr…5.4
• CVE-2020-7229An issue was discovered in Simplejobscript.com SJS before 1.…9.8
• CVE-2020-7231Evoko Home 1.31 devices provide different error messages for…5.3