CVE-2022-25246: PTC Axeda Agent

High severity, CVSS 8.8. EPSS: 1.8% chance of exploitation in the next 30 days.

Axeda agent (All versions) and Axeda Desktop Server for Windows (All versions) uses hard-coded credentials for its UltraVNC installation. Successful exploitation of this vulnerability could allow a remote authenticated attacker to take full remote control of the host operating system.

Affected products

• PTC Axeda Agent: before 6.9.1 (fixed in 6.9.1)
• PTC Axeda Desktop Server: before 6.9.215 (fixed in 6.9.215)

Published 2022-03-16. Last modified 2026-06-17.