CVE-2020-8146

In UniFi Video v3.10.1 for Windows 7/8/10 x64 there is a Local Privileges Escalation to SYSTEM from arbitrary file deletion and DLL hijack vulnerabilities. The issue was fixed by adjusting the .tsExport folder when the controller is running on Windows and adjusting the SafeDllSearchMode in the...

CVE-2020-8146

CVE-2020-8146 affects UniFi Video on Windows (v3.10.1 and prior to 3.10.3). The vulnerability enables Local Privilege Escalation to SYSTEM via arbitrary file deletion and DLL hijacking, with root causes tied to misconfigurations in the .tsExport handling and SafeDllSearchMode in the installer. Af...