Skip to content
CVE PROGRAM SOURCE RECORD7.5 High

CVE-2022-25249

PTC Axeda agent and Axeda Desktop Server Path Traversal

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
icscert

Description

When connecting to a certain port Axeda agent (All versions) and Axeda Desktop Server for Windows (All versions) (disregarding Axeda agent v6.9.2 and v6.9.3) is vulnerable to directory traversal, which could allow a remote unauthenticated attacker to obtain file system read access via web server..

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

PTC Axeda agent

  • All Versionsaffected

PTC Axeda Desktop Server for Windows

  • All Versionsaffected

References