Skip to content
CVE PROGRAM SOURCE RECORD9.8 Critical

CVE-2022-25247

PTC Axeda agent and Axeda Desktop Server Missing Authentication For Critical Function

Description

Axeda agent (All versions) and Axeda Desktop Server for Windows (All versions) may allow an attacker to send certain commands to a specific port without authentication. Successful exploitation of this vulnerability could allow a remote unauthenticated attacker to obtain full file-system access and remote code execution.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

PTC Axeda agent

  • All Versionsaffected

PTC Axeda Desktop Server for Windows

  • All Versionsaffected

References