CVE-2020-8146

Name of the Vulnerable Software and Affected Versions UniFi Video Controller versions prior to 3.10.3

Description The issue is a Local Privileges Escalation to SYSTEM from arbitrary file deletion and DLL hijack vulnerabilities. The problem was fixed by adjusting the .tsExport folder when the controller is running on Windows and adjusting the SafeDllSearchMode in the Windows registry when installing the UniFi-Video controller.

Recommendations For versions prior to 3.10.3, update to UniFi Video Controller version 3.10.3 or newer to resolve the issue. As a temporary workaround, consider adjusting the .tsExport folder and the SafeDllSearchMode in the Windows registry to minimize the risk of exploitation.