CVE-2022-25248

When connecting to a certain port Axeda agent (All versions) and Axeda Desktop Server for Windows (All versions) supplies the event log of the specific service.

CVSS v3 5.3 MEDIUM
CVSS v2.0 5.0 MEDIUM

5.3^/10

CVSS v3 : MEDIUM

Vector :

Exploitability : 3.9 / Impact : 1.4

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact LOW

Integrity Impact NONE

Availability Impact NONE

Scope UNCHANGED

5.0^/10

CVSS v2.0 : MEDIUM

Vector : AV:N/AC:L/Au:N/C:P/I:N/A:N

Exploitability : 10.0 / Impact : 2.9

Access Vector NETWORK

Access Complexity LOW

Authentication NONE

Confidentiality Impact PARTIAL

Integrity Impact NONE

Availability Impact NONE

References

Link	Resource
https://www.cisa.gov/uscert/ics/advisories/icsa-22-067-01	Mitigation Third Party Advisory US Government Resource
https://www.ptc.com/en/support/article/CS363561	Vendor Advisory
https://www.cisa.gov/uscert/ics/advisories/icsa-22-067-01	Mitigation Third Party Advisory US Government Resource
https://www.ptc.com/en/support/article/CS363561	Vendor Advisory

Configurations

Configuration 1 (hide)

OR	cpe:2.3:a:ptc:axeda_agent::::::::
	cpe:2.3:a:ptc:axeda_desktop_server::::::windows::*

History

21 Nov 2024, 06:51

Type	Values Removed	Values Added
References	~~() https://www.cisa.gov/uscert/ics/advisories/icsa-22-067-01 - Mitigation, Third Party Advisory, US Government Resource~~	() https://www.cisa.gov/uscert/ics/advisories/icsa-22-067-01 - Mitigation, Third Party Advisory, US Government Resource
References	~~() https://www.ptc.com/en/support/article/CS363561 - Vendor Advisory~~	() https://www.ptc.com/en/support/article/CS363561 - Vendor Advisory

Information

Published : 2022-03-16 15:15

Updated : 2024-11-21 06:51

NVD link : CVE-2022-25248

Mitre link : CVE-2022-25248

CVE.ORG link : CVE-2022-25248

JSON object : View

Products Affected

ptc

axeda_agent
axeda_desktop_server

CWE

CWE-200

Exposure of Sensitive Information to an Unauthorized Actor

{"id": "CVE-2022-25248", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 5.0, "accessVector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:N/A:N", "authentication": "NONE", "integrityImpact": "NONE", "accessComplexity": "LOW", "availabilityImpact": "NONE", "confidentialityImpact": "PARTIAL"}, "acInsufInfo": false, "impactScore": 2.9, "baseSeverity": "MEDIUM", "obtainAllPrivilege": false, "exploitabilityScore": 10.0, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}], "cvssMetricV31": [{"type": "Secondary", "source": "ics-cert@hq.dhs.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 5.3, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "NONE", "confidentialityImpact": "LOW"}, "impactScore": 1.4, "exploitabilityScore": 3.9}, {"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 5.3, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "NONE", "confidentialityImpact": "LOW"}, "impactScore": 1.4, "exploitabilityScore": 3.9}]}, "published": "2022-03-16T15:15:16.453", "references": [{"url": "https://www.cisa.gov/uscert/ics/advisories/icsa-22-067-01", "tags": ["Mitigation", "Third Party Advisory", "US Government Resource"], "source": "ics-cert@hq.dhs.gov"}, {"url": "https://www.ptc.com/en/support/article/CS363561", "tags": ["Vendor Advisory"], "source": "ics-cert@hq.dhs.gov"}, {"url": "https://www.cisa.gov/uscert/ics/advisories/icsa-22-067-01", "tags": ["Mitigation", "Third Party Advisory", "US Government Resource"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "https://www.ptc.com/en/support/article/CS363561", "tags": ["Vendor Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Secondary", "source": "ics-cert@hq.dhs.gov", "description": [{"lang": "en", "value": "CWE-200"}]}, {"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-200"}]}], "descriptions": [{"lang": "en", "value": "When connecting to a certain port Axeda agent (All versions) and Axeda Desktop Server for Windows (All versions) supplies the event log of the specific service."}, {"lang": "es", "value": "Cuando es conectado a un determinado puerto Axeda agent (Todas las versiones) y Axeda Desktop Server para Windows (Todas las versiones) suministra el registro de eventos del servicio espec\u00edfico"}], "lastModified": "2024-11-21T06:51:52.620", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:ptc:axeda_agent:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "A016E65E-5D4E-41FF-8C6A-F14EBAA7D08E", "versionEndExcluding": "6.9.1"}, {"criteria": "cpe:2.3:a:ptc:axeda_desktop_server:*:*:*:*:*:windows:*:*", "vulnerable": true, "matchCriteriaId": "9FFDC4DB-DDD1-48DE-9E3D-55D02BEE6EBC", "versionEndExcluding": "6.9.215"}], "operator": "OR"}]}], "sourceIdentifier": "ics-cert@hq.dhs.gov"}