Lucene search
B0ydH1:530967HistoryApr 08, 2019 - 5:01 a.m.
Ubiquiti Inc.: UniFi Video v3.10.1 (Windows) Local Privileges Escalation to SYSTEM from arbitrary filedelete and DLL hijack vulnerabilities.
2019-04-0805:01:36
b0yd
hackerone.com
16
EPSS
0.001
Percentile
27.2%
Summary:
UniFi Video v3.10.1 ( for Windows 7/8/10 x64) Local Privileges Escalation to SYSTEM from arbitrary file deletion and DLL hijack vulnerabilities.
The issue was fixed by adjusting the .tsExport folder when the controller is running on Windows and adjusting the SafeDllSearchMode in the windows registry when installing UniFi-Video controller.
More details about this vulnerability and the fixes can be found here: https://community.ui.com/releases/Security-advisory-bulletin-006-006/3cf6264e-e0e6-4e26-a331-1d271f84673e
Related
cvelist
cvelist
CVE-2020-8146
2020-04-01 22:21:21
nvd
nvd
CVE-2020-8146
2020-04-01 23:15:13
cve
cve
CVE-2020-8146
2020-04-01 23:15:13
openvas
openvas
UniFi Video < 3.10.3 Privilege Escalation Vulnerability
2020-04-08 00:00:00
prion
prion
Arbitrary file deletion
2020-04-01 23:15:00
osv
osv
CVE-2020-8146
2020-04-01 23:15:13