CVE-2022-25250 describes an unauthenticated vulnerability in all versions of PTC Axeda Agent and Axeda Desktop Server for Windows, allowing a remote attacker to send a specific command to a certain port. This vulnerability has a CVSS score of 7.5 (High) due to its network attack vector, low attack complexity, and high impact on availability, as it can lead to the shutdown of a specific service. While no public exploit code (Metasploit, Nuclei, ExploitDB) is available and it's not listed in CISA's KEV catalog, the vulnerability has garnered significant community discussion and media coverage, indicating awareness despite inactive exploitation.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
< 6.9.1CPE matchmatch criteria | cpe:2.3:a:ptc:axeda_agent:*:*:*:*:*:*:*:* | ||
< 6.9.215CPE matchmatch criteria | cpe:2.3:a:ptc:axeda_desktop_server:*:*:*:*:*:windows:*:* |
CVSS version used by this source: 3.1
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.1 Bluesky, 0.1 Mastodon, and 0.4 GitHub mentions.
The average CVE in this peer group has 0.1 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.
Remediation records are not available for this CVE.