Axeda Desktop Server for Windows vulnerabilities

6 known vulnerabilities in Axeda Desktop Server for Windows from PTC. 6 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.5 High severity

  Axeda agent: Improper Check for Unusual or Exceptional Conditions

  CVE-2022-25252Mar 16, 2022PTCEPSS 1.57%

  When connecting to a certain port Axeda agent (All versions) and Axeda Desktop Server for Windows (All versions) when receiving certain input throws an exception. Services using said function do not handle the exception. Successful exploitation of this vulnera

• 9.8 Critical severity

  Axeda agent: Missing Authentication for Critical Functionality

  CVE-2022-25251Mar 16, 2022PTCEPSS 1.87%

  When connecting to a certain port Axeda agent (All versions) and Axeda Desktop Server for Windows (All versions) may allow an attacker to send certain XML messages to a specific port without proper authentication. Successful exploitation of this vulnerability

• 7.5 High severity

  Axeda agent: Missing Authentication for Critical Functionality

  CVE-2022-25250Mar 16, 2022PTCEPSS 1.65%

  When connecting to a certain port Axeda agent (All versions) and Axeda Desktop Server for Windows (All versions) may allow an attacker to send a certain command to a specific port without authentication. Successful exploitation of this vulnerability could allo

• 7.5 High severity

  Axeda agent: Improper Limitation of a Pathname to a Restricted Directory

  CVE-2022-25249Mar 16, 2022PTCEPSS 2.47%

  When connecting to a certain port Axeda agent (All versions) and Axeda Desktop Server for Windows (All versions) (disregarding Axeda agent v6.9.2 and v6.9.3) is vulnerable to directory traversal, which could allow a remote unauthenticated attacker to obtain fi

• 9.8 Critical severity

  Axeda agent: Missing Authentication for Critical Functionality

  CVE-2022-25247Mar 16, 2022PTCEPSS 4.14%

  Axeda agent (All versions) and Axeda Desktop Server for Windows (All versions) may allow an attacker to send certain commands to a specific port without authentication. Successful exploitation of this vulnerability could allow a remote unauthenticated attacker

• 8.8 High severity

  Axeda agent: Use of Hard-coded Credentials

  CVE-2022-25246Mar 16, 2022PTCEPSS 1.81%

  Axeda agent (All versions) and Axeda Desktop Server for Windows (All versions) uses hard-coded credentials for its UltraVNC installation. Successful exploitation of this vulnerability could allow a remote authenticated attacker to take full remote control of t