CVE-2022-25252

HighCVSS 7.5/10Last modified Jun 17, 2026

Description

When connecting to a certain port Axeda agent (All versions) and Axeda Desktop Server for Windows (All versions) when receiving certain input throws an exception. Services using said function do not handle the exception. Successful exploitation of this vulnerability could allow a remote unauthenticated attacker to crash the affected product.

Metrics

CVSS 3.1 7.5/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Weakness enumeration

CWE-703 CWE-754

Affected software

No affected versions have been published.

Timeline

Published: Mar 16, 2022
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2022

CVE-2022-252557.8In Qt 5.9.x through 5.15.x before 5.15.9 and 6.x before 6.2.4 on Linux and UNIX, QProcess could execute a binary from the current working di CVE-2022-252566.1SAS Web Report Studio 4.4 allows XSS. /SASWebReportStudio/logonAndRender.do has two parameters: saspfs_request_backlabel_list and saspfs_req CVE-2022-252584.6An issue was discovered in drivers/usb/gadget/composite.c in the Linux kernel before 5.16.10. The USB Gadget subsystem lacks certain validat CVE-2022-252596.1JetBrains Hub before 2021.1.14276 was vulnerable to reflected XSS.CVE-2022-25269.8A use-after-free vulnerability was found in systemd. This issue occurs due to the on_stream_io() function and dns_stream_complete() function CVE-2022-252609.1JetBrains Hub before 2021.1.14276 was vulnerable to blind Server-Side Request Forgery (SSRF).CVE-2022-252616.1JetBrains TeamCity before 2021.2.2 was vulnerable to reflected XSS.CVE-2022-252629.8In JetBrains Hub before 2022.1.14434, SAML request takeover was possible.CVE-2022-252639.8JetBrains TeamCity before 2021.2.3 was vulnerable to OS command injection in the Agent Push feature configuration.CVE-2022-252647.5In JetBrains TeamCity before 2021.2.3, environment variables of the "password" type could be logged in some cases.CVE-2022-252657.8In the Linux kernel through 5.16.10, certain binary files may have the exec-all attribute if they were built in approximately 2003 (e.g., wi CVE-2022-252664.3Passwork On-Premise Edition before 4.6.13 allows migration/downloadExportFile Directory Traversal (to read files).