CVE-2016-6914 Ubiquiti UniFi Video before 3.8.0 for Windows uses weak permissions for the installation directory, which allows local users to gain SYSTEM privileges via a Trojan horse taskkill.exe file.
HighCVSS 7.8
EPSS 1.2%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
Ubiquiti UniFi Video before 3.8.0 for Windows uses weak permissions for the installation directory, which allows local users to gain SYSTEM privileges via a Trojan horse taskkill.exe file.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| ui unifi video | < 3.8.0 | 3.8.0 |
References
- packetstormsecurity.com third-party-advisory vdb-entry
- 20171223 [CVE-2016-6914] Ubiquiti UniFi Video v3.7.3 (Windows) Local Privileges Escalation via Insecure Directory Permissions mailing-list third-party-advisory
- 102278 third-party-advisory vdb-entry
- hackerone.com issue-tracking third-party-advisory
- 43390 exploit third-party-advisory vdb-entry