CVE-2021-25695

High

Description

The USB vHub in the Teradici PCOIP Software Agent prior to version 21.07.0 would accept commands from any program, which may allow an attacker to elevate privileges by changing the flow of program execution within the vHub driver.

SeverityHigh
CVSS7.8
Exploit probability—
ProductTeradici Pcoip
PublishedJul 21, 2021
First seenJul 21, 2021
Weakness typeCWE-782CWE-782

How to fix

Update
  • teradici pcoip21.07.0 or later

Affected products

ProductAffected versionsFixed in
teradici pcoipv < 21.07.021.07.0

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.