Описание
When connecting to a certain port Axeda agent (All versions) and Axeda Desktop Server for Windows (All versions) may allow an attacker to send a certain command to a specific port without authentication. Successful exploitation of this vulnerability could allow a remote unauthenticated attacker to shut down a specific service.
Ссылки
- MitigationThird Party AdvisoryUS Government Resource
- Vendor Advisory
- MitigationThird Party AdvisoryUS Government Resource
- Vendor Advisory
Уязвимые конфигурации
Одно из
EPSS
7.5 High
CVSS3
5 Medium
CVSS2
Дефекты
Связанные уязвимости
When connecting to a certain port Axeda agent (All versions) and Axeda Desktop Server for Windows (All versions) may allow an attacker to send a certain command to a specific port without authentication. Successful exploitation of this vulnerability could allow a remote unauthenticated attacker to shut down a specific service.
Уязвимость платформы для создания и развертывания приложений корпоративного уровня PTC Axeda, связанная с отсутствием аутентификации для критичной функции, позволяющая нарушителю отключить определенную службу
EPSS
7.5 High
CVSS3
5 Medium
CVSS2