CVE-2021-25698

—

CVSS 3.1

7.8 high

EPSS

<1%p34

Published

Jul 21, 2021 (Jul 21, 2021)

Modified

Jun 17, 2026

Description

The OpenSSL component of the Teradici PCoIP Standard Agent prior to version 21.07.0 was compiled without the no-autoload-config option, which allowed an attacker to elevate to the privileges of the running process via placing a specially crafted dll in a build configuration directory.

Vendors: teradici
Products: pcoip standard agent
Weakness: CWE-426
Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (0.4%)

In the news0 stories

No ingested article mentions this CVE yet.