PT-2022-11667

Name of the Vulnerable Software and Affected Versions Splashtop Streamer versions 3.4.8.3 and earlier Description The issue is related to the creation of a temporary file in a directory with insecure permissions. This could potentially lead to security issues, but specific details about...

Command Execution Vulnerability in Splashtop Streamer

Splashtop Streamer is a remote control system. Splashtop Streamer suffers from a command execution vulnerability. An attacker can exploit this vulnerability to gain server privileges...

Splashtop Software Updater Code Issue Vulnerability

Splashtop Software Updater is a software update application for Splashtop products from Splashtop USA. A security vulnerability exists in Splashtop Software Updater prior to version 1.5.6.16 in Splashtop Streamer prior to 3.3.8.0 and Splashtop Business prior to 3.3.8.0. An attacker can exploit th...

CVE-2020-12431

A Windows privilege change issue was discovered in Splashtop Software Updater before 1.5.6.16. Insecure permissions on the configuration file and named pipe allow for local privilege escalation to NT AUTHORITY/SYSTEM, by forcing a permission change to any Splashtop files and directories, with...

CVE-2020-12431

A Windows privilege change issue was discovered in Splashtop Software Updater before 1.5.6.16. Insecure permissions on the configuration file and named pipe allow for local privilege escalation to NT AUTHORITY/SYSTEM, by forcing a permission change to any Splashtop files and directories, with...

Privilege escalation

A Windows privilege change issue was discovered in Splashtop Software Updater before 1.5.6.16. Insecure permissions on the configuration file and named pipe allow for local privilege escalation to NT AUTHORITY/SYSTEM, by forcing a permission change to any Splashtop files and directories, with...

CVE-2020-12431

The CVE-2020-12431 entry describes a Windows local privilege escalation in Splashtop Software Updater (before 1.5.6.16) due to insecure permissions on the updater’s configuration file and a named pipe, enabling a forced permission change of Splashtop files/directories and DLL hijacking to achieve...

CVE-2020-12431

A Windows privilege change issue was discovered in Splashtop Software Updater before 1.5.6.16. Insecure permissions on the configuration file and named pipe allow for local privilege escalation to NT AUTHORITY/SYSTEM, by forcing a permission change to any Splashtop files and directories, with...

CVE-2020-12431: Incorrect Permission Assignment for Critical Resource

A Windows privilege change issue was discovered in Splashtop Software Updater before 1.5.6.16. Insecure permissions on the configuration file and named pipe allow for local privilege escalation to NT AUTHORITY/SYSTEM, by forcing a permission change to any Splashtop files and directories, with...

PT-2020-13110

Name of the Vulnerable Software and Affected Versions Splashtop Software Updater versions prior to 1.5.6.16 Splashtop Streamer versions prior to 3.3.8.0 Splashtop Business versions prior to 3.3.8.0 Description A Windows privilege change issue was discovered in the affected software. Insecure...

Splashtop Streamer remote detection

Binary data splashtopstreamerremotedetection.nbin...

Splashtop 2 Remote Desktop - Customized SSL, Dangerous filesystem permissions, Insecure SSL socket vulnerabilities

HackApp vulnerability scanner discovered that application Splashtop 2 Remote Desktop published at the 'play' market has multiple vulnerabilities...