CVE-2021-25695

Published: Jul 21, 2021Modified: Jun 17, 2026

7.8

Vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Exploitability: 1.8 / Impact: 5.9

Source: NVD

Description

The USB vHub in the Teradici PCOIP Software Agent prior to version 21.07.0 would accept commands from any program, which may allow an attacker to elevate privileges by changing the flow of program execution within the vHub driver.

Affected (1)

Products: Teradici: Pcoip

Teradici

1 product

Pcoip

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Teradici Pcoip	Before 21.07.0

Related CWEs

CWE-782

Exposed IOCTL with Insufficient Access Control

The product implements an IOCTL with functionality that should be restricted, but it does not properly enforce access control for the IOCTL.

References (2)

https://advisory.teradici.com/security-advisories/100/

Source: security@teradici.com

Vendor Advisory

https://advisory.teradici.com/security-advisories/100/

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

Timeline

No history available yet.