CVE-2022-25250

Published: Mar 16, 2022Modified: Jun 17, 2026

7.5

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Exploitability: 3.9 / Impact: 3.6

Source: NVD

Description

When connecting to a certain port Axeda agent (All versions) and Axeda Desktop Server for Windows (All versions) may allow an attacker to send a certain command to a specific port without authentication. Successful exploitation of this vulnerability could allow a remote unauthenticated attacker to shut down a specific service.

Affected (2)

Products: Ptc: Axeda Agent, Axeda Desktop Server

2 products

Axeda Desktop Server

Configuration A

2 vulnerable

Vulnerable Software	Affected Versions
Ptc Axeda Agent	Before 6.9.1
Ptc Axeda Desktop Server	Before 6.9.215

Related CWEs

Missing Authentication for Critical Function

The product does not perform any authentication for functionality that requires a provable user identity or consumes a significant amount of resources.

References (4)

https://www.cisa.gov/uscert/ics/advisories/icsa-22-067-01

Source: ics-cert@hq.dhs.gov

MitigationThird Party AdvisoryUS Government Resource

https://www.ptc.com/en/support/article/CS363561

Source: ics-cert@hq.dhs.gov

Vendor Advisory

https://www.cisa.gov/uscert/ics/advisories/icsa-22-067-01

Source: af854a3a-2127-422b-91ae-364da2661108

MitigationThird Party AdvisoryUS Government Resource

https://www.ptc.com/en/support/article/CS363561

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

Timeline

No history available yet.