CVE-2021-25695

HighCVSS 7.8/10Last modified Jun 17, 2026

Description

The USB vHub in the Teradici PCOIP Software Agent prior to version 21.07.0 would accept commands from any program, which may allow an attacker to elevate privileges by changing the flow of program execution within the vHub driver.

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-782

Affected software

No affected versions have been published.

Timeline

Published: Jul 21, 2021
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2021

CVE-2021-256987.8The OpenSSL component of the Teradici PCoIP Standard Agent prior to version 21.07.0 was compiled without the no-autoload-config option, whic CVE-2021-256997.8The OpenSSL component of the Teradici PCoIP Software Client prior to version 21.07.0 was compiled without the no-autoload-config option, whi CVE-2021-257015.5The fUSBHub driver in the PCoIP Software Client prior to version 21.07.0 had an error in object management during the handling of a variety CVE-2021-257356.5A security issue was discovered in kube-apiserver that could allow node updates to bypass a Validating Admission Webhook. Clusters are only CVE-2021-257366.3Kube-proxy on Windows can unintentionally forward traffic to local processes listening on the same port (“spec.ports[*].port”) as a LoadBa CVE-2021-257374.8A security issue was discovered in Kubernetes where a user may be able to redirect pod traffic to private networks on a Node. Kubernetes alr CVE-2021-257386.7Loading specially-crafted yaml with the Kubernetes Java Client library can lead to code execution.CVE-2021-257403.1A security issue was discovered with Kubernetes that could enable users to send network traffic to locations they would otherwise not have a CVE-2021-257418.1A security issue was discovered in Kubernetes where a user may be able to create a container with subpath volume mounts to access files & di CVE-2021-257427.1A security issue was discovered in ingress-nginx where a user that can create or update ingress objects can use the custom snippets feature CVE-2021-257433.0kubectl does not neutralize escape, meta or control sequences contained in the raw data it outputs to a terminal. This includes but is not l CVE-2021-257458.1A security issue was discovered in ingress-nginx where a user that can create or update ingress objects can use the spec.rules[].http.paths[