Skip to content
OpenAdvisories
High · 7.5 CVE-2022-25250 EUVD-2022-29947GHSA-gfgh-qxj6-4755

PTC Axeda agent and Axeda Desktop Server Missing Authentication For Critical Function

Published Mar 16, 2022 · Updated Apr 16, 2025 · Assigned by icscert

Description

When connecting to a certain port Axeda agent (All versions) and Axeda Desktop Server for Windows (All versions) may allow an attacker to send a certain command to a specific port without authentication. Successful exploitation of this vulnerability could allow a remote unauthenticated attacker to shut down a specific service.

Affected products

VendorProductAffectedFixed
PTC Axeda agent All Versions —
PTC Axeda Desktop Server for Windows All Versions —

Advisories 1

References