If your email program has trouble displaying this email, view as a webpage.

MedWatch - The FDA Safety Information and Adverse Event Reporting Program

Cybersecurity Alert: Vulnerabilities identified in medical device software components: PTC Axeda agent and Axeda Desktop Server

The U.S. Food and Drug Administration (FDA) is alerting medical device users and manufacturers about a cybersecurity vulnerability for the Axeda agent and Axeda Desktop Server.

The Axeda agent and desktop server are web-based technologies that allow one or more people to securely view and operate the same remote desktop, through the Internet.

All versions of Axeda agent and Axeda Desktop Server are affected.

Successful exploitation of this vulnerability could allow an unauthorized attacker to have full system access, remote code execution, read/change configuration, file system read access, log information access, and denial-of-service condition. Depending on its use in the medical device, these vulnerabilities could result in changes to the operation of the medical device and impact the availability of the remote support functionality.

Questions?

If manufacturers have questions about this cybersecurity vulnerability, contact PTC.

If users have questions about this cybersecurity vulnerability, contact your medical device manufacturer.