Splashtop Streamer CVE-2020-12431 Permission Bypass Vulnerability

Description

Splashtop Streamer on Windows has insecure permissions on the configuration file and named pipe allow for local privilege escalation to NT AUTHORITY/SYSTEM, by forcing a permission change to any Splashtop files and directories, with resultant DLL hijacking.

Affected Applications

Splashtop Streamer

CVE References

Other References