critical9.8
CVE-2022-25251
When connecting to a certain port Axeda agent (All versions) and Axeda Desktop Server for Windows (All versions) may allow an attacker to send certain XML mess…
Impact
When connecting to a certain port Axeda agent (All versions) and Axeda Desktop Server for Windows (All versions) may allow an attacker to send certain XML messages to a specific port without proper authentication. Successful exploitation of this vulnerability could allow a remote unauthenticated attacker to read and modify the affected product’s configuration.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Ptc | Axeda Agent | before 6.9.1 |
| Ptc | Axeda Desktop Server | before 6.9.215 |