CVE-2020-12431
MEDIUM 6.6EPSS 0.5%
A Windows privilege change issue was discovered in Splashtop Software Updater before 1.5.6.16. Insecure permissions on the configuration file and named pipe allow for local privilege escalation to NT AUTHORITY/SYSTEM, by forcing a permission change to any Splashtop files and directories, with resultant DLL hijacking. This product is bundled with Splashtop Streamer (before 3.3.8.0) and Splashtop Business (before 3.3.8.0).
- CVSS v3.1 NVD
- 6.6 MEDIUM
CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:H/A:H - CVSS v2.0 NVD
- 6.3 MEDIUM
AV:L/AC:M/Au:N/C:N/I:C/A:C - EPSS
- 0.55% chance of exploitation in the next 30 days, 45th percentile
- Published
- 2020-05-21
- Updated
- 2024-08-04