HIGH✓ PATCH🇵🇱 Wersja polska

CVE-2020-13177

CVSS 7.8v3.1pub. 2020-08-11upd. 2024-11-21

The support bundler in Teradici PCoIP Standard Agent for Windows and Graphics Agent for Windows versions prior to 20.04.1 and 20.07.0 does not use hard coded paths for certain Windows binaries, which allows an attacker to gain elevated privileges via execution of a malicious binary placed in the system path.

CVSS Vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

  • Teradici Graphics Agent

    APP
    Teradici
    < 20.04.1

  • Teradici Pcoip Standard Agent

    APP
    Teradici
    < 20.04.1
🟢
PATCH AVAILABLE
Vendor update available. Deploy in standard maintenance cycle.
CWE
References

Related vulnerabilities

CVE-2021-25698HIGH7.8ten sam produkt

The OpenSSL component of the Teradici PCoIP Standard Agent prior to version 21.07.0 was compiled without the n...

CVE-2020-13173HIGH7.8ten sam produkt

Initialization of the pcoip_credential_provider in Teradici PCoIP Standard Agent for Windows and PCoIP Graphic...

CVE-2019-20362HIGH7.8ten sam produkt

In Teradici PCoIP Agent before 19.08.1 and PCoIP Client before 19.08.3, an unquoted service path can cause exe...

CVE-2021-25688MEDIUM5.5ten sam produkt

Under certain conditions, Teradici PCoIP Agents for Windows prior to version 20.10.0 and Teradici PCoIP Agents...

CVE-2020-13178MEDIUM6.7ten sam produkt

A function in the Teradici PCoIP Standard Agent for Windows and Graphics Agent for Windows prior to version 20...