CVE-2020-24755

2021-05-1722:15:07

Google

osv.dev

7.2 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

39.3%

JSON

In Ubiquiti UniFi Video v3.10.13, when the executable starts, its first library validation is in the current directory. This allows the impersonation and modification of the library to execute code on the system. This was tested in (Windows 7 x64/Windows 10 x64).

CPENameOperatorVersion
unifi-video-controllereq3.10.4
unifi-video-controllereq3.9.9
unifi-video-controllereq3.9.12
unifi-video-controllereq3.10.12
unifi-video-controllereq3.9.3
unifi-video-controllereq3.10.8
unifi-video-controllereq3.9.7
unifi-video-controllereq3.10.10
unifi-video-controllereq3.9.4
unifi-video-controllereq3.9.2

Name	Operator	Version
unifi-video-controller	eq	3.10.4
unifi-video-controller	eq	3.9.9
unifi-video-controller	eq	3.9.12
unifi-video-controller	eq	3.10.12
unifi-video-controller	eq	3.9.3
unifi-video-controller	eq	3.10.8
unifi-video-controller	eq	3.9.7
unifi-video-controller	eq	3.10.10
unifi-video-controller	eq	3.9.4
unifi-video-controller	eq	3.9.2

Rows per page:

1-10 of 211

References

www.youtube.com/watch?v=T41h4yeh9dk