Vulnerability Description
Initialization of the pcoip_credential_provider in Teradici PCoIP Standard Agent for Windows and PCoIP Graphics Agent for Windows versions 19.11.1 and earlier creates an insecure named pipe, which allows an attacker to intercept sensitive information or possibly elevate privileges via pre-installing an application which acquires that named pipe.
CVSS Score
HIGH
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Teradici | Pcoip Graphics Agent | <= 19.11.1 |
| Teradici | Pcoip Standard Agent | <= 19.11.1 |
Related Weaknesses (CWE)
References
- https://advisory.teradici.com/security-advisories/55/Vendor Advisory
- https://advisory.teradici.com/security-advisories/55/Vendor Advisory
FAQ
What is CVE-2020-13173?
CVE-2020-13173 is a vulnerability with a CVSS score of 7.8 (HIGH). Initialization of the pcoip_credential_provider in Teradici PCoIP Standard Agent for Windows and PCoIP Graphics Agent for Windows versions 19.11.1 and earlier creates an insecure named pipe, which all...
How severe is CVE-2020-13173?
CVE-2020-13173 has been rated HIGH with a CVSS base score of 7.8/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2020-13173?
Check the references section above for vendor advisories and patch information. Affected products include: Teradici Pcoip Graphics Agent, Teradici Pcoip Standard Agent.