PT-2021-16761 · Teradici · Teradici Pcoip Software Agent

Published 2021-07-21 · Updated 2021-07-30 · CVE-2021-25695

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Teradici PCOIP Software Agent versions prior to 21.07.0

Description The issue allows an attacker to potentially elevate privileges by altering the program execution flow within the vHub driver, as the USB vHub in the affected software would accept commands from any program.

Recommendations For versions prior to 21.07.0, update to version 21.07.0 or later to resolve the issue.

Fix

Weakness Enumeration

CWE-782

Related Identifiers

CVE-2021-25695

Affected Products

Teradici Pcoip Software Agent

References · 3

• https://osv.dev/vulnerability/CVE-2021-25695 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-25695 · Security Note
• https://advisory.teradici.com/security-advisories/100 · Vendor Advisory