A critical unquoted service path vulnerability in the Splashtop Software Updater Service allows local attackers to achieve arbitrary code execution and privilege escalation.

The vulnerability exists due to an unquoted file path in the service configuration, specifically at C:\Program Files (x86)\Splashtop\Splashtop Software Updater. A local user with low privileges can place a malicious executable in the path to intercept the service execution, resulting in privilege escalation to LocalSystem.

Successful exploitation allows an attacker to gain full control over the affected system by executing code with elevated privileges. This poses a significant risk to data confidentiality, integrity, and system availability. Given the CVSS score of 8.4, this vulnerability is classified as High severity, necessitating immediate attention to prevent unauthorized administrative control.

Immediate Action: Contact the vendor to confirm the availability of a security update that addresses the unquoted service path, or manually reconfigure the service path to include proper quotation marks.

Proactive Monitoring: Monitor system logs for the creation of unexpected executable files within the Splashtop installation directories. Audit service configurations periodically to identify and remediate similar unquoted path vulnerabilities across the enterprise.

Compensating Controls: Restrict write permissions to the C:\Program Files (x86) directory and its subdirectories to prevent unauthorized users from placing malicious binaries in the vulnerable path.

Public Exploit Available: Yes, a functional local exploit is documented in the Exploit Database (EDB-ID: 51182).

The presence of a known local exploit makes this vulnerability a priority for remediation. IT administrators should identify all systems running the affected version of Splashtop and apply vendor-provided fixes or manual configuration changes to ensure the service path is properly quoted and protected from malicious injection.