CVE-2022-25249: PTC Axeda Agent

High severity, CVSS 7.5. EPSS: 2.5% chance of exploitation in the next 30 days.

When connecting to a certain port Axeda agent (All versions) and Axeda Desktop Server for Windows (All versions) (disregarding Axeda agent v6.9.2 and v6.9.3) is vulnerable to directory traversal, which could allow a remote unauthenticated attacker to obtain file system read access via web server..

Affected products

• PTC Axeda Agent: before 6.9.1 (fixed in 6.9.1)
• PTC Axeda Desktop Server: before 6.9.215 (fixed in 6.9.215)

Published 2022-03-16. Last modified 2026-06-17.