PT-2020-13372 · Teradici+1 · Teradici Pcoip Graphics Agent For Windows+2

Published 2020-05-28 · Updated 2022-07-12 · CVE-2020-13173

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Teradici PCoIP Standard Agent for Windows versions 19.11.1 and earlier Teradici PCoIP Graphics Agent for Windows versions 19.11.1 and earlier

Description The initialization of the pcoip credential provider creates an insecure named pipe, allowing an attacker to intercept sensitive information or possibly elevate privileges by pre-installing an application that acquires the named pipe.

Recommendations For Teradici PCoIP Standard Agent for Windows versions 19.11.1 and earlier, consider updating to a version later than 19.11.1 to resolve the issue. For Teradici PCoIP Graphics Agent for Windows versions 19.11.1 and earlier, consider updating to a version later than 19.11.1 to resolve the issue. As a temporary workaround, consider restricting access to the pcoip credential provider to minimize the risk of exploitation.

Fix

Race Condition

Weakness Enumeration

CWE-362

Related Identifiers

CVE-2020-13173

Affected Products

Teradici Pcoip Graphics Agent For Windows

Teradici Pcoip Standard Agent For Windows

Windows

References · 4

• https://advisory.teradici.com/security-advisories/55 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2020-13173 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2020-13173 · Security Note
• https://t.me/cibsecurity/12389 · Telegram Post