CVE-2023-3181
Description
The C:\Program Files (x86)\Splashtop\Splashtop Software Updater\uninst.exe process creates a folder at C:\Windows\Temp~nsu.tmp and copies itself to it as Au_.exe. The C:\Windows\Temp~nsu.tmp\Au_.exe file is automatically launched as SYSTEM when the system reboots or when a standard user runs an MSI repair using Splashtop Streamer’s Windows Installer. Since the C:\Windows\Temp~nsu.tmp folder inherits permissions from C:\Windows\Temp and Au_.exe is susceptible to DLL hijacking, standard users can write a malicious DLL to it and elevate their privileges.
How to fix
- splashtop splashtop3.5.6.0, 3.5.8.0 or later
- splashtop mirroring360_receiver2.4.0.1 or later
- splashtop mirroring360_sender1.3.0.0 or later
- splashtop splashtop_for_rmm3.5.8.0 or later
- splashtop streamer3.5.6.0 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| splashtop splashtop | v < 3.5.6.0, v < 3.5.8.0 | 3.5.6.0, 3.5.8.0 |
| splashtop mirroring360_receiver | v < 2.4.0.1 | 2.4.0.1 |
| splashtop mirroring360_sender | v < 1.3.0.0 | 1.3.0.0 |
| splashtop splashtop_for_rmm | v < 3.5.8.0 | 3.5.8.0 |
| splashtop streamer | v < 3.5.6.0 | 3.5.6.0 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.