CVE-2022-25249

HIGH

PTC Axeda Agent < 6.9.1 and Axeda Desktop Server < 6.9.215 - Unauthenticated Path Traversal

Title source: llm
STIX 2.1

Description

When connecting to a certain port Axeda agent (All versions) and Axeda Desktop Server for Windows (All versions) (disregarding Axeda agent v6.9.2 and v6.9.3) is vulnerable to directory traversal, which could allow a remote unauthenticated attacker to obtain file system read access via web server..

References (2)

Core 2
Core References
Mitigation, Third Party Advisory, US Government Resource x_refsource_misc
https://www.cisa.gov/uscert/ics/advisories/icsa-22-067-01
Vendor Advisory x_refsource_misc
https://www.ptc.com/en/support/article/CS363561

Scores

CVSS v3 7.5
EPSS 0.0238
EPSS Percentile 81.8%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

CISA SSVC

Vulnrichment
Exploitation none
Automatable yes
Technical Impact partial

Details

CWE
CWE-22
Status published
Products (2)
ptc/axeda_agent < 6.9.1
ptc/axeda_desktop_server < 6.9.215
Published Mar 16, 2022
Tracked Since Feb 18, 2026