Vulnerability Details CVE-2022-1805
When connecting to Amazon Workspaces, the SHA256 presented by AWS connection provisioner is not fully verified by Zero Clients. The issue could be exploited by an adversary that places a MITM (Man in the Middle) between a zero client and AWS session provisioner in the network. This issue is only applicable when connecting to an Amazon Workspace from a PCoIP Zero Client.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.002
EPSS Ranking 43.3%
CVSS Severity
CVSS v3 Score 8.1
References
Products affected by CVE-2022-1805
-
cpe:2.3:h:teradici:tera2_pcoip_zero_client:-
-
cpe:2.3:o:teradici:tera2_pcoip_zero_client_firmware:22.01
-
cpe:2.3:o:teradici:tera2_pcoip_zero_client_firmware:22.01.2
-
cpe:2.3:o:teradici:tera2_pcoip_zero_client_firmware:22.01.3
-
cpe:2.3:o:teradici:tera2_pcoip_zero_client_firmware:22.01.4
-
cpe:2.3:o:teradici:tera2_pcoip_zero_client_firmware:22.04