High severity7.8NVD Advisory· Published Jan 25, 2024· Updated Jun 17, 2026
CVE-2023-3181
CVE-2023-3181
Description
The C:\Program Files (x86)\Splashtop\Splashtop Software Updater\uninst.exe process creates a folder at C:\Windows\Temp~nsu.tmp and copies itself to it as Au_.exe. The C:\Windows\Temp~nsu.tmp\Au_.exe file is automatically launched as SYSTEM when the system reboots or when a standard user runs an MSI repair using Splashtop Streamer’s Windows Installer. Since the C:\Windows\Temp~nsu.tmp folder inherits permissions from C:\Windows\Temp and Au_.exe is susceptible to DLL hijacking, standard users can write a malicious DLL to it and elevate their privileges.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
8- cpe:2.3:a:splashtop:mirroring360_receiver:*:*:*:*:*:*:*:*Range: <2.4.0.1
- Range: 0
Patches
Vulnerability mechanics
References
1- github.com/mandiant/Vulnerability-Disclosures/blob/master/2023/MNDT-2023-0015.mdnvdThird Party Advisory
News mentions
0No linked articles in our index yet.