Description
Ubiquiti UniFi Video before 3.8.0 for Windows uses weak permissions for the installation directory, which allows local users to gain SYSTEM privileges via a Trojan horse taskkill.exe file.
Public exploits
Exploit or proof-of-concept code for this vulnerability is publicly available, which lowers the bar for attackers. Treat it as a reason to patch sooner.
Third-party code, not reviewed by us. Public PoCs are sometimes fake or contain malware. Read the code first and run it only in an isolated lab, against systems you are authorised to test.
Exploit-DB 1
- Ubiquiti UniFi Video 3.7.3 - Local Privilege Escalation EDB-43390 · local · Dec 26, 2017
GitHub 1 repository
-
CybermonkX/CVE-2016-6914-UniFiVideo-LPE ★ 0 · Feb 13, 2025
CVE-2016-6914-UniFiVideo-LPE
Sources: PoC-in-GitHub, Metasploit Framework, Exploit-DB — updated daily. Only links are listed; no exploit code is hosted here.
References
- 102278 vdb-entry
- 20171223 [CVE-2016-6914] Ubiquiti UniFi Video v3.7.3 (Windows) Local Privileges Escalation via Insecure Directory Permissions mailing-list
- https://hackerone.com/reports/140793
- 43390 exploit
- http://packetstormsecurity.com/files/145533/Ubiquiti-UniFi-Video-3.7.3-Windows-Local-Privilege-Escalation.html