CVE-2020-24755: High severity ubiquiti unifi video controller vulnerability

Published May 17, 2021

Updated

In Ubiquiti UniFi Video v3.10.13, when the executable starts, its first library validation is in the current directory. This allows the impersonation and modification of the library to execute code on the system. This was tested in (Windows 7 x64/Windows 10 x64).

Affected Software

1 affected component

UI UniFi Video=3.10.13

Event History

May 17, 2021

CVE Published

via MITRE·09:06 PM

Data Sourced

via MITRE·09:06 PM

Description

Frequently Asked Questions

What is CVE-2020-24755?

CVE-2020-24755 is a vulnerability in Ubiquiti UniFi Video v3.10.13 that allows the impersonation and modification of a library to execute code on the system.

How does CVE-2020-24755 affect Ubiquiti UniFi Video?

CVE-2020-24755 affects Ubiquiti UniFi Video v3.10.13 by allowing the impersonation and modification of a library, which can lead to the execution of malicious code on the system.

What is the severity of CVE-2020-24755?

CVE-2020-24755 has a severity rating of 7.8 out of 10 (high severity).

How can I fix CVE-2020-24755?

To fix CVE-2020-24755, it is recommended to update Ubiquiti UniFi Video to a version that is not affected by this vulnerability.

Where can I find more information about CVE-2020-24755?

More information about CVE-2020-24755 can be found at the following reference: https://www.youtube.com/watch?v=T41h4yeh9dk