CVE-2021-25695

Severity: high (CVSS 7.8 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.3% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2021-07-21 · updated 2026-06-17
Weakness: CWE-782

Description

The USB vHub in the Teradici PCOIP Software Agent prior to version 21.07.0 would accept commands from any program, which may allow an attacker to elevate privileges by changing the flow of program execution within the vHub driver.

Affected products

- PCoIP Agent for Windows: before 21.07.0 — fixed in 21.07.0

How to fix

Upgrade to a fixed version: - PCoIP Agent for Windows 21.07.0. Check the vendor advisory for mitigations.

References

https://advisory.teradici.com/security-advisories/100/
https://advisory.teradici.com/security-advisories/100/

Get alerted when CVE-2021-25695 or the next vulnerability affects your stack