CVE-2022-25249highCWE-22

CVE-2022-25249: falha de alta gravidade em PTC Axeda agent

PTC Axeda agent and Axeda Desktop Server Path Traversal

Publicada em · Atualizada em

Seguir esta CVE+ Monitorar Axeda agent+ Monitorar Axeda Desktop Server

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

21Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 7.5epss 2.5%
When connecting to a certain port Axeda agent (All versions) and Axeda Desktop Server for Windows (All versions) (disregarding Axeda agent v6.9.2 and v6.9.3) is vulnerable to directory traversal, which could allow a remote unauthenticated attacker to obtain file system read access via web server..
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Produtos afetados
PTC · Axeda agentPTC · Axeda Desktop Server for Windows
CVEs relacionadas — PTC Axeda agent

No mesmo produto, das mais perigosas para as menos.

CVE-2022-25247CRITICALPTC Axeda agent and Axeda Desktop Server Missing Authentication For Critical FunctionEPSS 4.1%CVE-2022-25251CRITICALPTC Axeda agent and Axeda Desktop Server Missing Authentication For Critical FunctionEPSS 1.9%CVE-2022-25246CRITICALPTC Axeda agent and Axeda Desktop Server Use of Hard-Coded CredentialsEPSS 1.8%CVE-2022-25250HIGHPTC Axeda agent and Axeda Desktop Server Missing Authentication For Critical FunctionEPSS 1.7%CVE-2022-25252HIGHPTC Axeda agent and Axeda Desktop Server Improper Check or Handling Of Exceptional ConditionsEPSS 1.6%CVE-2022-25248MEDIUMPTC Axeda agent and Axeda Desktop Server Information ExposureEPSS 0.9%