CVE-2020-13177 - AskarLabs CVE Database

CVE-2020-13177

Vendor N/A

Product - PCoIP Standard Agent for Windows - PCoIP Graphics Agent for Windows

Weakness CWE-427

Published August 11, 2020

Last update August 4, 2024

View on NVD All CVEs

CVSS base score

—

What the vulnerability does

01Description

The support bundler in Teradici PCoIP Standard Agent for Windows and Graphics Agent for Windows versions prior to 20.04.1 and 20.07.0 does not use hard coded paths for certain Windows binaries, which allows an attacker to gain elevated privileges via execution of a malicious binary placed in the system path.

Key dates

02Disclosure timeline

August 11, 2020 CVE published

August 4, 2024 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2020-13177 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/427.html

Identifiers

CVE CVE-2020-13177

CWE CWE-427

Affected versions

Vendor N/A

Product - PCoIP Standard Agent for Windows - PCoIP Graphics Agent for Windows

Affected PCoIP Standard Agent for Windows 20.04.0 and earlier, PCoIP Graphics Agent for Windows 20.04.0 and e