CVE-2022-25246 PTC Axeda agent and Axeda Desktop Server Use of Hard-Coded Credentials
Hard-coded credentials in PTC Axeda allow remote attackers to gain full control of the host operating system.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2022-25246?
CVE-2022-25246 is a critical vulnerability in PTC Axeda Desktop Server for Windows, published on 16 Mar 2022. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
Axeda agent (All versions) and Axeda Desktop Server for Windows (All versions) uses hard-coded credentials for its UltraVNC installation. Successful exploitation of this vulnerability could allow a remote authenticated attacker to take full remote control of the host operating system.
Weakness: CWE-798
Which versions are affected by CVE-2022-25246?
It affects 2 products.
Products include Ptc Axeda Agent, Ptc Axeda Desktop Server.
How do I fix CVE-2022-25246?
No fix has been published for CVE-2022-25246 yet. Limit exposure of the affected software until one is available.
Is CVE-2022-25246 being exploited?
There is no known exploitation of CVE-2022-25246 in the wild and no public exploit code.
Other vulnerabilities in PTC Axeda Desktop Server for Windows
- CVE-2022-25247 PTC Axeda agent and Axeda Desktop Server Missing Authentication For Critical Function
- CVE-2022-25251 PTC Axeda agent and Axeda Desktop Server Missing Authentication For Critical Function
- CVE-2022-25249 PTC Axeda agent and Axeda Desktop Server Path Traversal
- CVE-2022-25250 PTC Axeda agent and Axeda Desktop Server Missing Authentication For Critical Function
- CVE-2022-25252 PTC Axeda agent and Axeda Desktop Server Improper Check or Handling Of Exceptional Conditions
Sources
Also known as GHSA-r24p-mxfv-r3vm.