HHS TLP White PTC Axeda Agent and Axeda Desktop Server Vulnerabilities March 8, 2022

Executive Summary

CISA is aware of a public report, known as “Access:7” that details vulnerabilities found in PTC Axeda agent and Axeda Desktop Server. The Axeda agent and Axeda Desktop Server are web-based technologies that allow one or more people to securely view and operate the same remote desktop, through the Internet. These vulnerabilities can affect medical, Internet of Things (IoT), and embedded devices dependent on the affected product. Successful exploitation of these vulnerabilities could result in full system access, remote code execution, read/change configuration, file system read access, log information access, and a denialof-service condition.

View the detailed report below.