CVE-2022-25247: PTC Axeda Agent

Critical severity, CVSS 9.8. EPSS: 4.1% chance of exploitation in the next 30 days.

Axeda agent (All versions) and Axeda Desktop Server for Windows (All versions) may allow an attacker to send certain commands to a specific port without authentication. Successful exploitation of this vulnerability could allow a remote unauthenticated attacker to obtain full file-system access and remote code execution.

Affected products

• PTC Axeda Agent: before 6.9.1 (fixed in 6.9.1)
• PTC Axeda Desktop Server: before 6.9.215 (fixed in 6.9.215)

Published 2022-03-16. Last modified 2026-06-17.