« Volver al listado

CVE-2020-13178

Estado: ModificadaMedia (6.7)—

A function in the Teradici PCoIP Standard Agent for Windows and Graphics Agent for Windows prior to version 20.04.1 does not properly validate the signature of an external binary, which could allow an attacker to gain elevated privileges via execution in the context of the PCoIP Agent process.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (2)

Teradici — Graphics AgentTeradici — Pcoip Standard Agent

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2020-13178",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 4.6,
          "accessVector": "LOCAL",
          "vectorString": "AV:L/AC:L/Au:N/C:P/I:P/A:P",
          "authentication": "NONE",
          "integrityImpact": "PARTIAL",
          "accessComplexity": "LOW",
          "availabilityImpact": "PARTIAL",
          "confidentialityImpact": "PARTIAL"
        },
        "acInsufInfo": false,
        "impactScore": 6.4,
        "baseSeverity": "MEDIUM",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 3.9,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ],
    "cvssMetricV31": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "scope": "UNCHANGED",
          "version": "3.1",
          "baseScore": 6.7,
          "attackVector": "LOCAL",
          "baseSeverity": "MEDIUM",
          "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
          "integrityImpact": "HIGH",
          "userInteraction": "NONE",
          "attackComplexity": "LOW",
          "availabilityImpact": "HIGH",
          "privilegesRequired": "HIGH",
          "confidentialityImpact": "HIGH"
        },
        "impactScore": 5.9,
        "exploitabilityScore": 0.8
      }
    ]
  },
  "affected": [
    {
      "source": "security@teradici.com",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "- PCoIP Standard Agent for Windows - PCoIP Graphics Agent for Windows",
          "versions": [
            {
              "status": "affected",
              "version": "PCoIP Standard Agent for Windows 20.04.0 and earlier, PCoIP Graphics Agent for Windows 20.04.0 and earlier."
            }
          ]
        }
      ]
    }
  ],
  "published": "2020-08-11T18:15:12.800",
  "references": [
    {
      "url": "https://advisory.teradici.com/security-advisories/60/",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "security@teradici.com"
    },
    {
      "url": "https://advisory.teradici.com/security-advisories/60/",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Secondary",
      "source": "security@teradici.com",
      "description": [
        {
          "lang": "en",
          "value": "CWE-345"
        }
      ]
    },
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "CWE-345"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "A function in the Teradici PCoIP Standard Agent for Windows and Graphics Agent for Windows prior to version 20.04.1 does not properly validate the signature of an external binary, which could allow an attacker to gain elevated privileges via execution in the context of the PCoIP Agent process."
    },
    {
      "lang": "es",
      "value": "Una función en el Teradici PCoIP Standard Agent para Windows y el Graphics Agent para Windows anterior a la versión 20.04.1, no comprueba correctamente la firma de un binario externo, lo que podría permitir a un atacante alcanzar privilegios elevados mediante una ejecución en el contexto del proceso de PCoIP Agent"
    }
  ],
  "lastModified": "2026-06-17T02:52:44.630",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:teradici:graphics_agent:*:*:*:*:*:windows:*:*",
              "vulnerable": true,
              "matchCriteriaId": "14D4B030-1438-47EC-AA0A-1E74CFFA34E3",
              "versionEndExcluding": "20.04.1"
            },
            {
              "criteria": "cpe:2.3:a:teradici:pcoip_standard_agent:*:*:*:*:*:windows:*:*",
              "vulnerable": true,
              "matchCriteriaId": "C746FBCC-92C4-40BA-9C88-0C9FD3494932",
              "versionEndExcluding": "20.04.1"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "security@teradici.com"
}