← voltar
CVE-2022-25246criticalCWE-798

PTC Axeda agent and Axeda Desktop Server Use of Hard-Coded Credentials

28Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 9.8epss 1.8%
probabilidade de exploração
1.8%top 24% das CVEs
exploração observada
nãonenhuma fonte reporta
Axeda agent (All versions) and Axeda Desktop Server for Windows (All versions) uses hard-coded credentials for its UltraVNC installation. Successful exploitation of this vulnerability could allow a remote authenticated attacker to take full remote control of the host operating system.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H