CVE-2020-13177: 
Teradici PCoIP Graphics Agent vulnerability analysis and mitigation

The vulnerability (CVE-2020-13177) affects Teradici PCoIP Standard Agent for Windows and Graphics Agent for Windows versions prior to 20.04.1 and 20.07.0. The issue exists in the support bundler component which does not use hard coded paths for certain Windows binaries (NVD).

The vulnerability has been assigned a CVSS v3.1 base score of 7.8 (HIGH) with the vector string CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H. The weakness is categorized as CWE-427 (Uncontrolled Search Path Element). The vulnerability stems from the application's failure to properly secure paths for Windows binaries in the support bundler component (NVD).

If exploited, this vulnerability could allow an attacker to gain elevated privileges through the execution of a malicious binary placed in the system path. The impact affects system confidentiality, integrity, and availability with high severity ratings for each (NVD).

The vulnerability requires local access (AV:L) with low attack complexity (AC:L). No privileges are required (PR:N), but user interaction is needed (UI:R). The scope is unchanged (S:U), meaning the vulnerable component and impacted component are the same (NVD).

The vulnerability has been fixed in versions 20.04.1 and 20.07.0 of both the PCoIP Standard Agent for Windows and Graphics Agent for Windows. Users should upgrade to these or later versions to mitigate the vulnerability (NVD).