CVE-2020-12431

A Windows privilege change issue was discovered in Splashtop Software Updater before 1.5.6.16

published May 21, 2020

CVSS
—
EPSS
1%
Percentile
45.2
In the wild
Unconfirmed
What it is

A Windows privilege change issue was discovered in Splashtop Software Updater before 1.5.6.16. Insecure permissions on the configuration file and named pipe allow for local privilege escalation to NT AUTHORITY/SYSTEM, by forcing a permission change to any Splashtop files and directories, with resultant DLL hijacking. This product is bundled with Splashtop Streamer (before 3.3.8.0) and Splashtop Business (before 3.3.8.0).

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00550 · 45.2th percentile
Published
2020-05-21T16:16Z
EPSS history
Timeline
  • 21 MAY 16:16Z
    A Windows privilege change issue was discovered in Splashtop Software Updater before 1.5.6.16
    cvelistv5