VULNERABILITY INTELLIGENCE

CVE-2020-24755

CVSS score7.8 HIGH
EPSS probability0.58%
CISA KEVNot currently listed
Published2021-05-17
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Description

In Ubiquiti UniFi Video v3.10.13, when the executable starts, its first library validation is in the current directory. This allows the impersonation and modification of the library to execute code on the system. This was tested in (Windows 7 x64/Windows 10 x64).

Weakness classification

  • nvd@nist.gov: CWE-427

Primary references