What’s Vulnerable › Vulnerabilities

CVE-2019-20362

• Severity: high (CVSS 7.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.7% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2020-01-08 · updated 2026-06-17
• Weakness: CWE-428

Description

In Teradici PCoIP Agent before 19.08.1 and PCoIP Client before 19.08.3, an unquoted service path can cause execution of %PROGRAMFILES(X86)%\Teradici\PCoIP.exe instead of the intended pcoip_vchan_printing_svc.exe file.

Affected products

• - PCoIP Software Client: before 19.08.3 — fixed in 19.08.3
• Teradici Pcoip Graphics Agent: before 19.08.1 — fixed in 19.08.1
• Teradici Pcoip Standard Agent: before 19.08.1 — fixed in 19.08.1

How to fix

Upgrade to a fixed version: - PCoIP Software Client 19.08.3; Teradici Pcoip Graphics Agent 19.08.1; Teradici Pcoip Standard Agent 19.08.1. Check the vendor advisory for mitigations.

References

• https://help.teradici.com/s/article/unquoted-service-path-vulnerability-windows-agent-client-19-08-earlier
• https://help.teradici.com/s/article/unquoted-service-path-vulnerability-windows-agent-client-19-08-earlier

Get alerted when CVE-2019-20362 or the next vulnerability affects your stack