Amcrest https

Amcrest https DEFAULT

Looking at the spec sheet, it’s not hard to understand why someone in search of an affordable but well-specified home security camera would choose the wireless IPM-721 series from US company Amcrest.

Launched around 2015, it offers 720p HD quality, two-way audio, the ability to pan and tilt, night vision, rounded off with four hours of cloud storage for your video footage at no extra cost.

This week, we learned that the camera had another less welcome characteristic in the form of six security flaws discovered back in 2017 by a researcher at security outfit Synopsys.

The 721 family has since been superseded by newer designs, which doesn’t, of course, mean that the many thousands of people who bought the product will stop using it just because a researcher has turned up security issues.

Those cameras are out there, an unknown number of which are in a vulnerable state that an attacker might identify using the Shodan search engine if they are configured to be accessible via the internet. Ideally, these cameras need to be identified and patched as soon as possible.

There are really three issues in play here – the nature and severity of the flaws, how users should go about updating the firmware to secure their cameras, and why it’s taken until 2019 for owners to hear about them.

The flaws

According to Threatpost, which spoke to the Synopsys researcher who uncovered the flaws, there are six vulnerabilities, now identified as CVE-2017-8226, CVE-2017-8227, CVE-2017-8228, CVE-2017-8229, CVE-2017-8230 and CVE-2017-13719.

We weren’t able to track down an advisory from Amcrest, but Synopsys posted outlines of each on Bugtraq.

Two of these – CVE-2017-8229 and CVE2017-13719 – earn a CVSS score of 9.8 and 10 respectively, which means they are critical issues.

The first allows an unauthenticated attacker to discover the camera’s admin credentials stored in clear text, facilitating a takeover of the device and, presumably including locking legitimate users out of the UI. Worryingly:

Based on cursory analysis of other Amcrest products, this might be prevalent in all the Amcrest IP cameras and also other Amcrest products.

The second is a problem in a stack overflow flaw affecting the camera’s Open Network Video Interface Forum (ONVIF) specification. This, too, could affect other Amcrest IP cameras, allowing devices to be remotely hijacked.

How to update

Reportedly, Amcrest made software patching the flaws some months ago, which would have been offered to owners when they next logged in. However, anyone who didn’t log in during this period would presumably not receive that notification.

According to Synopsis, all firmware versions (models 721S, 721W, 721B) for up to and including V2.420.AC00.16.R 9/9/2016 are vulnerable. On that basis, the firmware version offered on Amcrest’s website, V2.520.AC00.18.R, is the one to look for.

This can be applied manually by logging into the device’s UI, checking firmware versions and accessing Setup > System > Upgrade (you’ll find detailed instructions here).

Why the delay?

As the 2017 date on the CVEs makes clear, Amcrest has known about these flaws for least 18 months or more. It offered updated firmware a few months ago but delayed telling owners about the security aspect of its purpose in order to “give users time to update.”

Our concern with this would be the researcher’s assessment that other Amcrest camera systems might be affected by the two most serious flaws which, if correct, surely deserves a full public advisory.

Assuming users will update when they log in (which many never do) isn’t good enough. Owners need to be told to do this via email or via the company’s Twitter account (@AmcrestSecurity).

Ironically, Amcrest appears to be a responsible vendor by the Internet of Things’ standards where ignoring researchers and failing to offer patches can be the default position for some companies.


Connecting to your Amcrest IP camera*

Try the following connection options in iSpy or Agent to connect to your Amcrest IP camera. If an FFMPEG option is available we recommend you try that first as it will often be faster and include audio support. You can also try the VLC plugin if the FFMPEG option isn't working.

The settings for Amcrest cameras are built right into our free surveillance software - click "Add" then "IP camera with wizard" to automatically setup your Amcrest cameras. Remember to also try connecting via ONVIF as Amcrest cameras may support ONVIF connections as well.

Start typing in the "Make" box to find your camera. If your camera is not listed then click "Get Latest List" in settings or when on the add camera wizard. If you need to modify the URL then add or edit the Amcrest camera and you can modify the connection type and URL in the video source dialog (button is top of the first tab).

Amcrest compatible software*

Download Amcrest compatible software

Tip: Click a model to generate a URL for your camera

1080, 1080P, 3MP, 720P, 720P IPM-721S, 720P IPM-723S, 722S, 841BIMI, 842, AMC000DJ27SPS2C2QY, AMC1080, BLIIP2M-841W, HDPRO, IMP-722S, IMP-723, ip2m, IP2M-841, ip2m-841b, IP2M841b, IP2M-841E, IP2M-841W, IP2M-842, IP2M-842B, IP2M-842E, IP2M-842W, IP2M-844E, IP2M-854EW, ip3-951, IP3M, IP3M-943, IP3M-943B, IP3M-943S, IP3M-954E, IP3M-954EW, IP3M-956B, ip3m-956e, IP3M-956E, IP3M-956EB, IP3M-956EW, ip4m-, ip4m-1025e, IP4M-1025EB, IP67, ip721, IPM-721, ipm-721s, IPM721S, IPM722S, IPM-722S, IPM-723, IPM-723S, ipm-723w, IPM-723W, IPM-751, Other, Tent, WillHouse IP2M-841VLChttp:///axis-cgi/mjpg/video.cgi
1080, 1080P, 720P IPM-721S, 841, AMC000DJ27SPS2C2QY, AMC1080, IP2-841M, IP2M-841, IP2M-841B, IP2M-842, IP2m-842b, IP2M-842E, IP2M-846B, IP3M-943B, IP3M-943W, IP3M-954E, IP3M-956E, IP4M-1025EB, IP-842M, IPM2M-841B, IPM-721, IPM-721S, IPM-722S, IPM-743ESMJPEGhttp://axis-cgi/mjpg/video.cgi?camera=1&resolution=[WIDTH]x[HEIGHT]
1080, 1080P, 13p, 180, 1920TVL, 193, 1P2M-841B, 481, 720P, 720P IPM-721b, 720P IPM-721ES, 720P IPM-721S, 720P IPM-723S, 722-IP, 722s, 841, 841bimi, 841W, 850E, AD110, AMC1080, amco349438798, BliIP2M-841W, HDPRO, HDPRO IPM, imp, imp722s, imp-723b, ip2m, IP2M-841, IP2M841b, IP2M-841B, IP2M-841EB, IP2M-841S, IP2M-841W, IP2M-842E, IP2M-843EB, IP2M-844E, IP2M-844EW, IP2M-851EB, IP2M-853EW, ip3, IP3M, IP3M-941, IP3M-941B, IP3M-941W, IP3M-943, IP3M-943B, IP3M-943W, IP3M-956B, IP3M-HX2B, IP4M-, IP4M-1024E, IP4M-1025E, IP4M-1025EB, IP4M-1025EW, IP4M-1026, IP4M-1026EB, ip4m-1028b, IP5M-T1179EW, IP8M-2493EW, IP8M-2943ew, ipm 723w, IPM2M-841B, IPM3M-956W, IPM-721, IPM-721B, IPM-721ES, IPM-721S, ipm-721w, IPM-722S, ipm-723b, IPM723S, IPM-723W, IPM-743, ipm-743es, IPM-751W, IPM-HX1, IPM-HX1W, Other, PROHDJPEGhttp://cgi-bin/snapshot.cgi?chn=[CHANNEL]&u=[USERNAME]&p=[PASSWORD]
1080, 1080p, 1920TVL, 3MP, 720P IPM-721S, 841, 841BIMI, 842, HDpro, IP2-841M, IP2M, IP2M-841, IP2M841B, IP2M-842, IP2M-842B, IP2M-842E, IP2M-842W, IP2M-844E, IP3M-943B, IP3M-943W, IP3M-954E, IP3M-954EW, IP3M-956, IP3M-956E, IP3M-956EB, IP3M-956EW, IP4M-1025EB, IPM2m-841B, IPM721S, IPM-722, Other, PROHDMJPEGhttp://axis-cgi/mjpg/video.cgi?camera=[CHANNEL]
1080, 1080P, 1080Psh, 3MP, HDPRO, IP2-841M, IP2M-841, ip2m-841b, IP2M-842E, IP2M-844E, IP3E-956, ip3m-943w, IP3M-954EW, IP3M-956E, IP4M-1025EB, ipm 723w, IPM-723B, IPM-743ES, IPM-751W, OtherMJPEGhttp://cgi-bin/video.cgi?msubmenu=mjpg
1080-, 1080P, 1080P HD, 1920TVL, 1P2M-841B, 3MP, 720P IPM-721S, 720P IPM-723S, 721, 7225, 741, 821, 841, 841w, 842, 852EW, AMC000DJ27SPS2C2QY, AMC001WU65RYZXPQER, AMDV7204, DVR, HDPRO, ip20-841b, IP2-841M, IP2-851EB, IP2M, ip2m 841b, IP2M-841, IP2M841B, IP2M-841E, IP2M-841EB, IP2M-841W, IP2M-842, IP2M-842B, IP2M-842E, IP2M-842W, IP2M-843EB, IP2M-844E, IP2M-844E_JL, ip2m-846b, IP2M-851EB, ip2m-851ew, ip2m-851w, IP2M-852 V2, IP2M853EW, ip2m-854ew, ip3, IP3M, IP3M-941, IP3M-941B, IP3M-941W, ip3m-943b, IP3M-954E, IP3M-954EB, IP3M-956, IP3M-HX2B, IP3M-HX2W, IP4M, ip4m-1024e, IP4m-1024EW, IP4M-1024EW, IP4M-1025E, IP4M-1025EW, IP4M-1026, IP4M-1026B, IP4M-1026W, IP4M-1028E, IP4m-1051, IP4M-1051B, IP5M1173EB-28MM, IP8M-2493EW, IP8M-2496E, IP8M-2496EB, IP8M-T2499EW, IPM 723W, ipm2-841w, IPM2m-841B, IPM-721P, IPM-721s, IPM721S, IPM-722S, IPM723b, IPM-743, ipm-841, IPM-HX1B, IPM-HX1W, Other, PROHD, Tree64clopsJPEGhttp://cgi-bin/snapshot.cgi?loginuse=[USERNAME]&loginpas=[PASSWORD]
1080-, OtherMJPEGhttp://videostream.cgi?usr=[USERNAME]&pwd=[PASSWORD]
1080P, 722, 842, IMP-743, IP2M-841B, IP2M-844E, ip2m-846e, IP2M-846EB, IP3M-954E, IP3M-956EW, IP-842M, IPM-722S, IPM-743ES, OtherFFMPEGrtsp://live
1080P, 720P IPM-723S, 842, AMC1080, HDPRO, IP2-841M, IP2M-841, ip2m-841b, IP2M841B, IP2M-842B, IP2M-844E, IP3M-943B, IP3M952E, IP3M-954E, IP3M-956E, IP3M-956EB, IPM2-841, IPM-722S, IPM-723S, OtherMJPEGhttp://axis-cgi/mjpg/video.cgi?date=1&clock=1&resolution=[WIDTH]x[HEIGHT]
720P, 720P IPM-721S, 720P IPM-723S, HDPRO, IMP722S, IP2-841M, IP2M-841, IP2M-841B, IP2M-841W, IP2M-842, IP2M-842B, IP2M-842W, IP3M952E, IP3M-954E, IP3M-956EB, ipm721s, IPM-721W, IPM-722S, IPM-723B, IPM723S, IPM-743ES, IPM-751W, OtherMJPEGhttp://axis-cgi/mjpg/video.cgi?date=1&clock=1&camera=[CHANNEL]&resolution=[WIDTH]x[HEIGHT]
720P, M1WFFMPEGrtsp:///cam/realmonitor?channel=1&subtype=00&authbasic=YWRtaW46Y2F1Y2FzaWExKg==
722, 722-IP, AMC041EC14, IP2M841B, IP2M-841EW, IP3M-943B, IP4K-Bullet, IP4M-1051W, IP4MP-Dome, IP8M-2496E, IPM722SFFMPEGrtsp:///cam/realmonitor
722, AMDH10808, IP2M-841, IP2M-842, IP2M-842EW, IP3M-956EW, IP4M-1025EB, IPM-722S, IPM-743ES, NVR-PTZ-staticFFMPEGrtsp://cam/realmonitor?channel=[CHANNEL]&subtype=1
AMDV7204, IP2M-842E, IP3M-956E, QCAM IP3M952EFFMPEGrtsp:///h264Preview_01_main
IP2M-841, OtherJPEGhttp://image/jpeg.cgi
IP3M-941B, OtherMJPEGhttp://mjpeg.cgi?user=[USERNAME]&password=[PASSWORD]&channel=[CHANNEL]
ip4m-1024e, IP4M-1025EB, IP5M-1173EFFMPEGrtsp:///cam/realmonitor?channel=1&subtype=00&authbasic=YWRtaW46bXJtYmttMjAxNQ==
IP5M-T1179EW 28MMFFMPEGrtsp:///cam/realmonitor?channel=1&subtype=1&authbasic=YWRtaW46Y2hleG1peDE=
IP5M-T1179EW 28MMFFMPEGrtsp:///cam/realmonitor?channel=1&subtype=00&authbasic=YWRtaW46Y2hleG1peDE=
IP8M-2493EB, IP8M-2597EB-28MMFFMPEGrtsp:///cam/realmonitor?channel=1&subtype=00&authbasic=YWRtaW46MTAzMVRSSUI=

* iSpyConnect has no affiliation, connection, or association with Amcrest’s products. The connection details provided here are crowd sourced from the community and may be incomplete, inaccurate or both. We provide no warranty that you will be successful using these connection URLs or that Amcrest products are compatible with iSpy.


Other makes starting with A

More Sources

All rights reserved. No part of this database may be reproduced, distributed, or transmitted in any form or by any means, including photocopying, recording, or other electronic or mechanical methods, without the prior written permission of the publisher, except in the case of brief quotations embodied in critical reviews and certain other noncommercial uses permitted by copyright law.

  1. Ps3 charging cable
  2. Eminem jordans
  3. Picture hanging hooks
  4. Hdmi adapter
  5. Oldsmobile 442 horsepower


The camera platform allows you to integrate your Amcrest or Dahua IP camera or doorbell in Home Assistant.

There is currently support for the following device types within Home Assistant:

  • Binary Sensor
  • Camera
  • Sensor


To enable your camera in your installation, add the following to your file:

Configuration Variables

Looking for your configuration file?

host stringRequired

The IP address or hostname of your camera. If using a hostname, make sure the DNS works as expected.

username stringRequired

The username for accessing your camera.

password stringRequired

The password for accessing your camera.

name string (Optional, default: Amcrest Camera)

This parameter allows you to override the name of your camera. In the case of multi-camera setups, this is highly recommended as camera id number will be randomly changed at each reboot if a name is not allocated.

port integer (Optional, default: 80)

The port that the camera is running on.

resolution string (Optional, default: high)

This parameter allows you to specify the camera resolution. For a high resolution (1080/720p), specify the option . For VGA resolution (640x480p), specify the option .

stream_source string (Optional, default: snapshot)

The data source for the live stream. will use the camera’s native MJPEG stream, whereas will use the camera’s snapshot API to create a stream from still images. You can also set the option to generate the streaming via RTSP protocol.

ffmpeg_arguments string (Optional, default: -pred 1)

Extra options to pass to ffmpeg, e.g., image quality or video filter options.

authentication string (Optional, default: basic)

Defines which authentication method to use only when is . Currently, only support .

scan_interval integer (Optional, default: 10)

Defines the update interval of the sensor in seconds.

binary_sensors list (Optional, default: None)

Conditions to display in the frontend. The following conditions can be monitored:


Return when audio is detected, when not. In order to use this feature you must enable it in your cameras interface under Settings > Events > Audio Detection. Uses streaming method (see below).


Return when audio is detected, when not. In order to use this feature you must enable it in your cameras interface under Settings > Events > Audio Detection. Uses polled method (see below).


Return when a motion is detected, when not. Motion detection is enabled by default for most cameras, if this functionality is not working check that it is enabled in Settings > Events > Video Detection. Uses streaming method (see below).


Return when a motion is detected, when not. Motion detection is enabled by default for most cameras, if this functionality is not working check that it is enabled in Settings > Events > Video Detection. Uses polled method (see below).


Return when a tripwire tripping is detected, when not. Uses streaming method (see below).


Return when a tripwire is tripping is detected, when not. Uses polled method (see below).


Return when camera is available (i.e., responding to commands), when not.

sensors list (Optional, default: None)

Conditions to display in the frontend. The following conditions can be monitored:


Return the SD card usage by reporting the total and used space.


Return the number of PTZ preset positions configured for the given camera.

control_light boolean (Optional, default: true)

Automatically control the camera’s indicator light, turning it on if the audio or video streams are enabled, and turning it off if both streams are disabled.

Note: Amcrest cameras with newer firmware no longer have the ability to stream definition video with MJPEG encoding. You may need to use resolution stream or the stream source instead. If the quality seems too poor, lower the and max out the settings in your camera’s configuration manager. If you defined the to , make sure your camera supports HTTP authentication. Newer Amcrest firmware may not work, then is recommended instead.

Note: If you set the option to , make sure to follow the steps mentioned at FFmpeg documentation to install the .

Streaming vs Polled Binary Sensors

Some binary sensors provide two choices for method of operation: streaming or polled. Streaming is more responsive and causes less network traffic because the camera will tell Home Assistant when the sensor’s state has changed. Polled mode queries the camera periodically (every five seconds) to check the state of the sensor. Therefore streaming is the better option. However, some camera models and versions of camera firmware do not seem to implement the streaming method properly. Therefore the polled mode is also available. It is recommended to use the streaming mode (e.g., ) first, and if that doesn’t work (e.g., results in constant errors), then try the polled mode instead (e.g., .)


Once loaded, the Amcrest integration will generate (Home Assistant) events when it receives event notifications in the stream sent by the camera. This is only possible if the camera model and firmware implement the streaming method (see above). The event type is and the data is as follows:

The event code is sent by Amcrest or Dahua devices in the payload as a “Code” member. To ease event matching in automations, this code is replicated in a more top-level member in .


Once loaded, the integration will expose services that can be called to perform various actions. The service attribute can specify one or more specific cameras, or can be used to specify all configured Amcrest cameras.

Available services: , , , , , , , , , , and

Service enable_audio/disable_audio

These services enable or disable the camera’s audio stream.

Service data attributeOptionalDescription
noThe entity ID of the camera to control. May be a list of multiple entity IDs. To target all cameras, set entity ID to .

Service enable_motion_recording/disable_motion_recording

These services enable or disable the camera to record a clip to its configured storage location when motion is detected.

Service data attributeOptionalDescription
noThe entity ID of the camera to control. May be a list of multiple entity IDs. To target all cameras, set entity ID to .

Service enable_recording/disable_recording

These services enable or disable the camera to continuously record to its configured storage location.

Service data attributeOptionalDescription
noThe entity ID of the camera to control. May be a list of multiple entity IDs. To target all cameras, set entity ID to .

Service goto_preset

This service will cause the camera to move to one of the PTZ locations configured within the camera.

Service data attributeOptionalDescription
noThe entity ID of the camera to control. May be a list of multiple entity IDs. To target all cameras, set entity ID to .
noPreset number, starting from 1.

Service set_color_bw

This service will set the color mode of the camera.

Service data attributeOptionalDescription
noThe entity ID of the camera to control. May be a list of multiple entity IDs. To target all cameras, set entity ID to .
noOne of , or .

Service start_tour/stop_tour

These services start or stop the camera’s PTZ tour function.

Service data attributeOptionalDescription
noThe entity ID of the camera to control. May be a list of multiple entity IDs. To target all cameras, set entity ID to .

Service ptz_control

If your Amcrest or Dahua camera supports PTZ, you will be able to pan, tilt or zoom your camera.

Service data attributeOptionalDescription
noThe entity ID of the camera to control. May be a list of multiple entity IDs. To target all cameras, set entity ID to .
noDirection of the movement. Allowed values: , , , , , , , , ,
yesTravel time in fractional seconds. Allowed values: to . Default: .


  • PTZ zoom capability does not control VariFocal lens adjustments.
  • There can be several seconds of lag before the video (snapshot or live) reflects the camera movement.

Example card with controls

Screenshot using a picture-elements with PTZ controls. Example showing an Amcrest IP2M-841 PT camera with controls for Pan and Tilt.

Using the following picture-elements card code, you can display a live video feed from an Amcrest camera with controls for moving or zooming the camera.

Advanced Configuration

You can also use this more advanced configuration example:

To check if your Amcrest camera is supported/tested, visit the supportability matrix link from the project.

Amcrest Video Doorbell - Local Storage - RTSP Integration with Blue Iris and Home Assistant


Https amcrest


Amcrest IP Cameras - Port Forwarding Setup


Now discussing:


336 337 338 339 340