What’s Vulnerable › Vulnerabilities

CVE-2020-13173

• Severity: high (CVSS 7.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2020-05-28 · updated 2026-06-17
• Weakness: CWE-362

Description

Initialization of the pcoip_credential_provider in Teradici PCoIP Standard Agent for Windows and PCoIP Graphics Agent for Windows versions 19.11.1 and earlier creates an insecure named pipe, which allows an attacker to intercept sensitive information or possibly elevate privileges via pre-installing an application which acquires that named pipe.

Affected products

• Teradici Pcoip Graphics Agent: through 19.11.1
• Teradici Pcoip Standard Agent: through 19.11.1

References

• https://advisory.teradici.com/security-advisories/55/
• https://advisory.teradici.com/security-advisories/55/

Get alerted when CVE-2020-13173 or the next vulnerability affects your stack