Riskcovery

CVE-2022-25246

PTC Axeda agent and Axeda Desktop Server Use of Hard-Coded Credentials

State
Published
Severity
9.8 Critical
Published
Mar 16, 2022
Updated
Apr 16, 2025
Reserved
Feb 16, 2022

Read the record on cve.org

Description

Axeda agent (All versions) and Axeda Desktop Server for Windows (All versions) uses hard-coded credentials for its UltraVNC installation. Successful exploitation of this vulnerability could allow a remote authenticated attacker to take full remote control of the host operating system.

Scores

CVSSScoreVectorSource
3.19.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:Hicscert

Weaknesses

  • CWE-798 Use of Hard-coded Credentials

Affected Products

ProductVersions
Axeda agentPTC
  • All VersionsAffected
Axeda Desktop Server for WindowsPTC
  • All VersionsAffected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.