Exploit for Out-of-bounds Write in Accfly 720P_Firmware

CVE-2020-25782 CVE-2020-25783 CVE-2020-25784 CVE-2020-25785

githubexploit · 2021-01-26

Description

Exploit for Out-of-bounds Write in Accfly 720P Firmware. Lack of authentication, remote code execution vulnerabilities, no encryption, misuse of root privileges, outdated software versions

Affected Accfly 720p Firmware versions

Accfly 720p Firmware≤ 4.15.77

All known vulnerabilities by product

Accfly Wireless Security Ir Camera System 720P

CVSS Score

9.8

HIGH SEVERITY

Version 3.1

VectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Attack Vector:NETWORK

Attack Complexity:LOW

Privileges Required:NONE

User Interaction:NONE

Scope:UNCHANGED

Confidentiality:HIGH

Integrity:HIGH

Availability:HIGH

Working code

98%confidence this exploit runs

Based on 9 file(s) in the source

EPSS Score

2.9%higher than 85.3% of all CVEs

Updated 2026-06-16

Exploit Details

Modified:2021-11-29 06:21

Last Seen:2025-08-31 20:50

Reporter:tezeb

Written in:Python

Last commit:2021-01-26

Other exploits for the same CVE

accfly

2026-09-03 KitPloitKITPLOIT

Exploit Code

README2 lines

## https://sploitus.com/exploit?id=D45D0F74-7F76-5D91-87B8-C874E434847A
PoC exploit for CVE-2020-25782, CVE-2020-25783, CVE-2020-25784, CVE-2020-25785 vulnerabilities in Accfly camera. The target product/service is Accfly camera, and the vulnerability class/vector is not specified. The probable entry point is not evident. Notable dependencies/tooling include bcrypt, capstone, certifi, cffi, chardet, cryptography, idna, intervaltree, Mako, MarkupSafe, packaging, paramiko, psutil, pwntools, pycparser, pyelftools, Pygments, PyNaCl, pyparsing, pyserial, PySocks, python-dateutil, requests, ROPGadget, six, sortedcontainers, and unicorn. The execution context is not specified. The run method is not specified. Preconditions include vulnerable version or configuration of Accfly camera. Expected impact is not specified.

Exploit Code

Share

Share on social media: