CVE-2016-6914

概要

参考情報

• packetstormsecurity.com/files/145533/Ubiquiti-UniFi-Video-3.7.3-Windows-Local-Privilege-Escalation.html · Third Party Advisory
• seclists.org/fulldisclosure/2017/Dec/83 · Mailing List
• securityfocus.com/bid/102278 · Third Party Advisory
• hackerone.com/reports/140793 · Issue Tracking
• exploit-db.com/exploits/43390 · Third Party Advisory

unifi video のその他の脆弱性

• CVE-2020-24755高 7.8In Ubiquiti UniFi Video v3.10.13, when the executable starts, its first library validation is in the current directory. This allows the impe…
• CVE-2020-8146高 7.8In UniFi Video v3.10.1 (for Windows 7/8/10 x64) there is a Local Privileges Escalation to SYSTEM from arbitrary file deletion and DLL hijack…
• CVE-2020-8145中 6.5The UniFi Video Server (Windows) web interface configuration restore functionality at the “backup” and “wizard” endpoints does not implement…
• CVE-2020-8144高 8.4The UniFi Video Server v3.9.3 and prior (for Windows 7/8/10 x64) web interface Firmware Update functionality, under certain circumstances, d…
• CVE-2019-5430高 8.8In UniFi Video 3.10.0 and prior, due to the lack of CSRF protection, it is possible to abuse the Web API to make changes on the server confi…