CVE-2022-1805

2022-07-2814:21:09

www.cve.org

amazon workspaces

zero clients

sha256

mitm

pcoip

AI Score

Confidence

High

EPSS

0.002

Percentile

53.5%

JSON

When connecting to Amazon Workspaces, the SHA256 presented by AWS connection provisioner is not fully verified by Zero Clients. The issue could be exploited by an adversary that places a MITM (Man in the Middle) between a zero client and AWS session provisioner in the network. This issue is only applicable when connecting to an Amazon Workspace from a PCoIP Zero Client.

CNA Affected

[
  {
    "product": "Tera2 Zero Client",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "Firmware version 22.04 and earlier"
      }
    ]
  }
]

References

support.hp.com/us-en/document/ish_6545906-6545930-16/hpsbhf03794