VULNERABILITY INTELLIGENCE

CVE-2025-10227

CVSS score4.6 MEDIUM
EPSS probability0.08%
CISA KEVNot currently listed
Published2025-09-10
Last modified2026-09-26
CVSS vectorCVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Description

Missing Encryption of Sensitive Data (CWE-311) in the Object Archive component in AxxonSoft Axxon One (C-Werk) before 2.0.8 on Windows and Linux allows a local attacker with access to exported storage or stolen physical drives to extract sensitive archive data in plaintext via lack of encryption at rest.

Weakness classification

  • 15ede60e-6fda-426e-be9c-e788f151a377: CWE-311

Primary references