What is CVE-2021-25695?

CVE-2021-25695 is a high-severity vulnerability in Teradici Pcoip, classified under CWE-782. CVSS score: 7.8/10. Published 2021-07-21.

How severe is CVE-2021-25695?

High severity. CVSS v3 base score is 7.8 out of 10.

Vulnerability in Teradici Pcoip

CVE-2021-25695

The USB vHub in the Teradici PCOIP Software Agent prior to version 21.07.0 would accept commands from any program, which may allow an attacker to elevate privileges by changing the flow of program execution within the vHub driver.

EPSS: 0.003 (20.2th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 7.8 (High). Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H.

Affected products

Teradici Pcoip
N/a - Pcoip Agent For Windows — versions 21.07.0

Weakness classification (CWE)

CWE-782

References

security@teradici.com (x_refsource_MISC, Vendor Advisory)

Frequently asked questions

What is CVE-2021-25695?: CVE-2021-25695 is a high-severity vulnerability in Teradici Pcoip, classified under CWE-782. CVSS score: 7.8/10. Published 2021-07-21.
How severe is CVE-2021-25695?: High severity. CVSS v3 base score is 7.8 out of 10.