Insecure Permissions in Splashtop Software Updater

CVE-2023-3181

What is CVE-2023-3181?

A vulnerability exists within the Splashtop Software Updater that allows an attacker to leverage a specific process to create a temporary folder in the Windows Temp directory. This process copies itself to a new file, which can be executed with elevated privileges upon system reboot or during specific user actions involving the Splashtop Streamer installation. Due to the inherited permissions of the temporary folder, standard users can potentially write a malicious DLL to the created executable path, enabling them to execute arbitrary code with SYSTEM privileges.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References