PT-2020-19982
CVE-2020-8146
·
تاريخ النشر
2020-04-01
·
تاريخ التحديث
2021-07-21
الوصف من
CVSS 3.1
7.8
عاليةالمقاييسAV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
UniFi Video Controller versions prior to 3.10.3
Description
The issue is a Local Privileges Escalation to SYSTEM from arbitrary file deletion and DLL hijack vulnerabilities. The problem was fixed by adjusting the .tsExport folder when the controller is running on Windows and adjusting the SafeDllSearchMode in the Windows registry when installing the UniFi-Video controller.
Recommendations
For versions prior to 3.10.3, update to UniFi Video Controller version 3.10.3 or newer to resolve the issue. As a temporary workaround, consider adjusting the .tsExport folder and the SafeDllSearchMode in the Windows registry to minimize the risk of exploitation.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾