CVE-2020-24755

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2020-24755
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2020-24755.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2020-24755
Published
2021-05-17T22:15:07Z
Modified
2026-07-08T19:02:40Z
Severity
  • 7.8 (High) CVSS_V3 - CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVSS Calculator
Summary
[none]
Details

In Ubiquiti UniFi Video v3.10.13, when the executable starts, its first library validation is in the current directory. This allows the impersonation and modification of the library to execute code on the system. This was tested in (Windows 7 x64/Windows 10 x64).

References

Affected packages

Git / github.com/pducharme/unifi-video-controller

Affected ranges

Type
GIT
Repo
https://github.com/pducharme/unifi-video-controller
Events
Introduced
879bf089089e4cf483dd68c97de56f9ecd318282
Last Affected
879bf089089e4cf483dd68c97de56f9ecd318282
Database specific
Show details 
{
    "cpe": "cpe:2.3:a:ui:unifi_video:3.10.13:*:*:*:*:*:*:*",
    "extracted_events": [
        {
            "introduced": "3.10.13"
        },
        {
            "last_affected": "3.10.13"
        }
    ],
    "source": "CPE_STRING"
}

Affected versions

3.*
3.10.13

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2020-24755.json"