SA40166 - Remote desktop protocol (RDP) client restriction bypass issue

A security issue was discovered in the PCS Terminal Services Remote Desktop Protocol (RDP) client session restrictions feature. By exploiting this issue a malicious authenticated user could bypass security controls applied against their terminal services session. This issue is only exploitable by users who have a valid authenticated session to the PCS device as well as authenticating to the backend terminal services server.

This issue has been resolved in PCS 8.1R8 and 8.2R1.1, and later.

To resolve this issue you must update to a release that contains the fix. There are no workarounds for this issue.