PT-2026-2361 · Splashtop · Splashtop

A.I. Hernandez · Publicado 2026-01-13 · Atualizado 2026-01-15 · CVE-2022-50693

Positive Technologies (AI Summary)

CVSS v3.1

8.4

Alta

Vetor base

AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Splashtop version 8.71.12001.0

Description The software contains an unquoted service path vulnerability within the Splashtop Software Updater Service. This allows local attackers to potentially execute arbitrary code. The vulnerability exists due to an unquoted path in 'C:Program Files (x86)SplashtopSplashtop Software Updater', enabling attackers to inject malicious executables and escalate privileges.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Enumeração de Fraquezas

CWE-428

Identificadores relacionados

CVE-2022-50693

Produtos afetados

Splashtop

Referências · 5

• 🔥 https://exploit-db.com/exploits/51182 · Exploit
• https://splashtop.com · Nota
• https://vulncheck.com/advisories/splashtop-unquoted-service-path · Nota
• https://twitter.com/CVEnew/status/2011759642255192475 · Publicação no Twitter
• https://nvd.nist.gov/vuln/detail/CVE-2022-50693 · Nota de Segurança