PT-2020-10398 · Teradici · Teradici Pcoip Agent+1

Published 2020-01-08 · Updated 2020-01-17 · CVE-2019-20362

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Teradici PCoIP Agent versions prior to 19.08.1 Teradici PCoIP Client versions prior to 19.08.3

Description The issue arises from an unquoted service path, leading to the execution of %PROGRAMFILES(X86)%TeradiciPCoIP.exe instead of the intended pcoip vchan printing svc.exe file.

Recommendations For Teradici PCoIP Agent versions prior to 19.08.1, update to version 19.08.1 or later. For Teradici PCoIP Client versions prior to 19.08.3, update to version 19.08.3 or later.

Fix

Weakness Enumeration

CWE-428

Related Identifiers

CVE-2019-20362

Affected Products

Teradici Pcoip Agent

Teradici Pcoip Client

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2019-20362 · Security Note
• https://osv.dev/vulnerability/CVE-2019-20362 · Vendor Advisory
• https://help.teradici.com/s/article/unquoted-service-path-vulnerability-windows-agent-client-19-08-earlier · Note