CVE-2022-25251: PTC Axeda Agent

Critical severity, CVSS 9.8. EPSS: 1.9% chance of exploitation in the next 30 days.

When connecting to a certain port Axeda agent (All versions) and Axeda Desktop Server for Windows (All versions) may allow an attacker to send certain XML messages to a specific port without proper authentication. Successful exploitation of this vulnerability could allow a remote unauthenticated attacker to read and modify the affected product’s configuration.

Affected products

• PTC Axeda Agent: before 6.9.1 (fixed in 6.9.1)
• PTC Axeda Desktop Server: before 6.9.215 (fixed in 6.9.215)

Published 2022-03-16. Last modified 2026-06-17.