VULNERABILITY INTELLIGENCE

CVE-2025-10227

CVSS score5.1 MEDIUM
EPSS probability0.08%
CISA KEVNot currently listed
Published2025-09-10
Last modified2026-09-26
CVSS vectorCVSS:4.0/AV:P/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N

Description

Missing Encryption of Sensitive Data (CWE-311) in the Object Archive component in AxxonSoft Axxon One (C-Werk) before 2.0.8 on Windows and Linux allows a local attacker with access to exported storage or stolen physical drives to extract sensitive archive data in plaintext via lack of encryption at rest.

Weakness classification

  • CWE-311: Missing Encryption of Sensitive Data

Primary references