Lucene search
IcscertCVELIST:CVE-2022-25248HistoryMar 16, 2022 - 2:03 p.m.
CVE-2022-25248 PTC Axeda agent and Axeda Desktop Server Information Exposure
2022-03-1614:03:32
CWE-200
icscert
www.cve.org
3
cve-2022-25248
axeda agent
axeda desktop server
information exposure
windows
CVSS3
5.3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
LOW
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
AI Score
5.6
Confidence
High
EPSS
0.001
Percentile
32.2%
When connecting to a certain port Axeda agent (All versions) and Axeda Desktop Server for Windows (All versions) supplies the event log of the specific service.
CNA Affected
[
{
"product": "Axeda agent",
"vendor": "PTC",
"versions": [
{
"status": "affected",
"version": "All Versions"
}
]
},
{
"product": "Axeda Desktop Server for Windows",
"vendor": "PTC",
"versions": [
{
"status": "affected",
"version": "All Versions"
}
]
}
]Related
cve
cve
CVE-2022-25248
2022-03-16 15:15:16
nvd
nvd
CVE-2022-25248
2022-03-16 15:15:16
prion
prion
Code injection
2022-03-16 15:15:00
ics
ics
PTC Axeda agent and Axeda Desktop Server (Update C)
2022-03-31 12:00:00
thn
thn
CVSS3
5.3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
LOW
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
AI Score
5.6
Confidence
High
EPSS
0.001
Percentile
32.2%
Related for CVELIST:CVE-2022-25248