What’s Vulnerable › Vulnerabilities

CVE-2022-25252: PTC Axeda agent and Axeda Desktop Server Improper Check or Handling Of Exceptional Conditions

• Severity: high (CVSS 7.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.6% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2022-03-16 · updated 2026-06-17
• Weakness: CWE-703

Description

When connecting to a certain port Axeda agent (All versions) and Axeda Desktop Server for Windows (All versions) when receiving certain input throws an exception. Services using said function do not handle the exception. Successful exploitation of this vulnerability could allow a remote unauthenticated attacker to crash the affected product.

Affected products

• PTC Axeda agent: before 6.9.1 — fixed in 6.9.1
• PTC Axeda Desktop Server: before 6.9.215 — fixed in 6.9.215

How to fix

Upgrade to a fixed version: PTC Axeda agent 6.9.1; PTC Axeda Desktop Server 6.9.215. Check the vendor advisory for mitigations.

References

• https://www.cisa.gov/uscert/ics/advisories/icsa-22-067-01
• https://www.ptc.com/en/support/article/CS363561
• https://www.cisa.gov/uscert/ics/advisories/icsa-22-067-01
• https://www.ptc.com/en/support/article/CS363561

Get alerted when CVE-2022-25252 or the next vulnerability affects your stack