CVE-2019-20362

EUVD-2019-10915
In Teradici PCoIP Agent before 19.08.1 and PCoIP Client before 19.08.3, an unquoted service path can cause execution of %PROGRAMFILES(X86)%\Teradici\PCoIP.exe instead of the intended pcoip_vchan_printing_svc.exe file.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
7.8 HIGH
LOCAL
LOW
LOW
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Base Score
CVSS 3.x
EPSS Score
Percentile: 30%
Affected Products (NVD)
VendorProductVersion
teradicipcoip_standard_agent
𝑥
< 19.08.1
teradicipcoip_graphics_agent
𝑥
< 19.08.1
teradicipcoip_client
𝑥
< 19.08.3
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
https://help.teradici.com/s/article/unquoted-service-path-vulnerability-windows-agent-client-19-08-earlier
https://help.teradici.com/s/article/unquoted-service-path-vulnerability-windows-agent-client-19-08-earlier