CVE-2020-13177CWE-427

The support bundler in Teradici PCoIP Standard Agent for Windows and Graphics Agent for Windows versions prior to 20.04.1 and 20.07.0 does not use hard coded…

published August 11, 2020

CVSS
—
EPSS
0%
Percentile
30.3
In the wild
Unconfirmed
What it is

The support bundler in Teradici PCoIP Standard Agent for Windows and Graphics Agent for Windows versions prior to 20.04.1 and 20.07.0 does not use hard coded paths for certain Windows binaries, which allows an attacker to gain elevated privileges via execution of a malicious binary placed in the system path.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00376 · 30.3th percentile
Weakness
CWE-427 · Uncontrolled Search Path Element
Published
2020-08-11T17:47Z
EPSS history
Timeline
  • 11 AUG 17:47Z
    The support bundler in Teradici PCoIP Standard Agent for Windows and Graphics Agent for Windows versions prior to 20.04.1 and 20.07.0 does not use hard coded…
    cvelistv5