CVE-2022-25249: Improper Limitation of a Pathname to a Restricted Directory

When connecting to a certain port Axeda agent All versions and Axeda Desktop Server for Windows All versions disregarding Axeda agent v6.9.2 and v6.9.3 is vulnerable to directory traversal, which could allow a remote unauthenticated attacker to obtain file system read access via web server...

CVE-2022-25251: Missing Authentication for Critical Function

When connecting to a certain port Axeda agent All versions and Axeda Desktop Server for Windows All versions may allow an attacker to send certain XML messages to a specific port without proper authentication. Successful exploitation of this vulnerability could allow a remote unauthenticated...

PT-2022-17177

Name of the Vulnerable Software and Affected Versions Axeda agent All versions Axeda Desktop Server for Windows All versions Description The issue concerns the Axeda agent and Axeda Desktop Server for Windows, where they supply the event log of a specific service when connecting to a certain port...

PT-2022-1932

Name of the Vulnerable Software and Affected Versions PTC Axeda Axeda agent versions All PTC Axeda Axeda Desktop Server for Windows versions All Description The issue is related to incorrect exception handling in the xBase39 module of the PTC Axeda platform. This can be exploited by a remote...

CVE-2022-25246: Use of Hard-coded Credentials

Axeda agent All versions and Axeda Desktop Server for Windows All versions uses hard-coded credentials for its UltraVNC installation. Successful exploitation of this vulnerability could allow a remote authenticated attacker to take full remote control of the host operating system...

CVE-2022-25252: Improper Check or Handling of Exceptional Conditions

When connecting to a certain port Axeda agent All versions and Axeda Desktop Server for Windows All versions when receiving certain input throws an exception. Services using said function do not handle the exception. Successful exploitation of this vulnerability could allow a remote unauthenticat...

CVE-2022-25248: Exposure of Sensitive Information to an Unauthorized Actor

When connecting to a certain port Axeda agent All versions and Axeda Desktop Server for Windows All versions supplies the event log of the specific service...

CVE-2022-25250: Missing Authentication for Critical Function

When connecting to a certain port Axeda agent All versions and Axeda Desktop Server for Windows All versions may allow an attacker to send a certain command to a specific port without authentication. Successful exploitation of this vulnerability could allow a remote unauthenticated attacker to sh...

CVE-2022-25247: Missing Authentication for Critical Function

Axeda agent All versions and Axeda Desktop Server for Windows All versions may allow an attacker to send certain commands to a specific port without authentication. Successful exploitation of this vulnerability could allow a remote unauthenticated attacker to obtain full file-system access and...

PT-2022-1930

Name of the Vulnerable Software and Affected Versions Axeda agent All versions Axeda Desktop Server for Windows All versions Description The issue is related to a lack of authentication for a critical function, allowing a remote unauthenticated attacker to send a certain command to a specific por...

PT-2022-1804

Name of the Vulnerable Software and Affected Versions Axeda agent All versions Axeda Desktop Server for Windows All versions Description The issue allows an attacker to send certain XML messages to a specific port without proper authentication, potentially enabling a remote unauthenticated attack...

PT-2022-1805

Name of the Vulnerable Software and Affected Versions Axeda agent All versions Axeda Desktop Server for Windows All versions Description The issue is related to the use of hard-coded credentials for the UltraVNC installation in the affected software. This could allow a remote authenticated attack...

PT-2022-1806

Name of the Vulnerable Software and Affected Versions Axeda agent All versions Axeda Desktop Server for Windows All versions Description The issue allows an attacker to send certain commands to a specific port without authentication. Successful exploitation could allow a remote unauthenticated...

PT-2022-1929

Name of the Vulnerable Software and Affected Versions Axeda agent versions prior to 6.9.2 Axeda agent versions prior to 6.9.3 Axeda Desktop Server for Windows all versions Description The issue is related to incorrect restriction of a directory path name with limited access. This could allow a...