Insecure Permissions in Splashtop Software Updater

CVE-2023-3181

What is CVE-2023-3181?

A vulnerability exists within the Splashtop Software Updater that allows an attacker to leverage a specific process to create a temporary folder in the Windows Temp directory. This process copies itself to a new file, which can be executed with elevated privileges upon system reboot or during specific user actions involving the Splashtop Streamer installation. Due to the inherited permissions of the temporary folder, standard users can potentially write a malicious DLL to the created executable path, enabling them to execute arbitrary code with SYSTEM privileges.

References