critical9.8
CVE-2022-25246
Axeda agent (All versions) and Axeda Desktop Server for Windows (All versions) uses hard-coded credentials for its UltraVNC installation.
Impact
Axeda agent (All versions) and Axeda Desktop Server for Windows (All versions) uses hard-coded credentials for its UltraVNC installation. Successful exploitation of this vulnerability could allow a remote authenticated attacker to take full remote control of the host operating system.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Ptc | Axeda Agent | before 6.9.1 |
| Ptc | Axeda Desktop Server | before 6.9.215 |