CVE-2022-25252: falha de alta gravidade em PTC Axeda agent
PTC Axeda agent and Axeda Desktop Server Improper Check or Handling Of Exceptional Conditions
Publicada em · Atualizada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
21Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackcvss 7.5epss 1.6%
When connecting to a certain port Axeda agent (All versions) and Axeda Desktop Server for Windows (All versions) when receiving certain input throws an exception. Services using said function do not handle the exception. Successful exploitation of this vulnerability could allow a remote unauthenticated attacker to crash the affected product.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVEs relacionadas — PTC Axeda agent
No mesmo produto, das mais perigosas para as menos.
CVE-2022-25247CRITICALPTC Axeda agent and Axeda Desktop Server Missing Authentication For Critical FunctionEPSS 4.1%CVE-2022-25249HIGHPTC Axeda agent and Axeda Desktop Server Path TraversalEPSS 2.5%CVE-2022-25251CRITICALPTC Axeda agent and Axeda Desktop Server Missing Authentication For Critical FunctionEPSS 1.9%CVE-2022-25246CRITICALPTC Axeda agent and Axeda Desktop Server Use of Hard-Coded CredentialsEPSS 1.8%CVE-2022-25250HIGHPTC Axeda agent and Axeda Desktop Server Missing Authentication For Critical FunctionEPSS 1.7%CVE-2022-25248MEDIUMPTC Axeda agent and Axeda Desktop Server Information ExposureEPSS 0.9%