Skip to content
CVE PROGRAM SOURCE RECORD9.8 Critical

CVE-2022-25251

PTC Axeda agent and Axeda Desktop Server Missing Authentication For Critical Function

Description

When connecting to a certain port Axeda agent (All versions) and Axeda Desktop Server for Windows (All versions) may allow an attacker to send certain XML messages to a specific port without proper authentication. Successful exploitation of this vulnerability could allow a remote unauthenticated attacker to read and modify the affected product’s configuration.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

PTC Axeda agent

  • All Versionsaffected

PTC Axeda Desktop Server for Windows

  • All Versionsaffected

References