Read the docs
TI-2020-10351 Aliases CVE-2020-13173GHSA-66mr-xvvj-95jm

Race condition in PCoIP Standard Agent for Windows, PCoIP Graphics Agent for Windows

Priority LOW 34CWE-362Published · Updated

Key facts

Attack vector
Local
Privileges required
Low
User interaction
None
Attack complexity
Low
Impact type
—
Confidentiality · integrity · availability
High · High · High
Fix status
No fix listed

Attack profile from CVSS 3.1 · NVD. Fix status from CNA.

Summary

Initialization of the pcoip_credential_provider in Teradici PCoIP Standard Agent for Windows and PCoIP Graphics Agent for Windows versions 19.11.1 and earlier creates an insecure named pipe, which allows an attacker to intercept sensitive information or possibly elevate privileges via pre-installing an application which acquires that named pipe.

Why it matters now

EPSS 0.00232 14th percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
—PCoIP Standard Agent for Windows, PCoIP Graphics Agent for Windowsup to 19.11.1—No fix listedCNA
  • PCoIP Standard Agent for Windows, PCoIP Graphics Agent for Windows Vendor— Affected up to 19.11.1 Fixed in — No fix listed CNA

CPE configurations NVD · 2

CPEVersionsRoleVendor
cpe:2.3:a:teradici:pcoip_graphics_agent:*:*:*:*:*:windows:*:*up to 19.11.1VulnerableTeradici
cpe:2.3:a:teradici:pcoip_standard_agent:*:*:*:*:*:windows:*:*up to 19.11.1VulnerableTeradici
  • cpe:2.3:a:teradici:pcoip_graphics_agent:*:*:*:*:*:windows:*:* Versions up to 19.11.1 Vulnerable ·Teradici
  • cpe:2.3:a:teradici:pcoip_standard_agent:*:*:*:*:*:windows:*:* Versions up to 19.11.1 Vulnerable ·Teradici

Remediation

No fixed version listed by the sources yet.

Timeline

  1. 2026-10-02 Threatist record created from CVE-2020-13173
  2. 2026-10-03 Alias added: GHSA-66mr-xvvj-95jm

References

Advisory 1

  • TI-2019-14601 In Teradici PCoIP Agent before 19.08.1 and PCoIP Client before 19.08.3, an unquoted… CVSS 3.1HIGH 7.8
  • TI-2021-07822 Teradici PCoIP Graphics Agent for Windows prior to 21.03 does not validate NVENC.dll. CVSS 3.1HIGH 7.8
  • TI-2021-07817 Sensitive information in log files in - PCoIP Standard Agent for Windows - PCoIP Standard… CVSS 3.1MEDIUM 5.5

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences