Skip to content
OpenAdvisories
Critical · 9.8 CVE-2022-25251 EUVD-2022-29948GHSA-v435-3jg8-vq2r

PTC Axeda agent and Axeda Desktop Server Missing Authentication For Critical Function

Published Mar 16, 2022 · Updated Apr 16, 2025 · Assigned by icscert

Description

When connecting to a certain port Axeda agent (All versions) and Axeda Desktop Server for Windows (All versions) may allow an attacker to send certain XML messages to a specific port without proper authentication. Successful exploitation of this vulnerability could allow a remote unauthenticated attacker to read and modify the affected product’s configuration.

Affected products

VendorProductAffectedFixed
PTC Axeda agent All Versions —
PTC Axeda Desktop Server for Windows All Versions —

Advisories 1

References