Unrated severityNVD Advisory· Published Sep 10, 2025· Updated Oct 8, 2025
Hardcoded Password Exposure in AxxonNet (C-WerkNet) ARP Agent Logs
CVE-2025-10221
Description
Insertion of Sensitive Information into Log File (CWE-532) in the ARP Agent component in AxxonSoft Axxon One / AxxonNet / C-WerkNet 2.0.4 and earlier on Windows platforms allows a local attacker to obtain plaintext credentials via reading TRACE log files containing serialized JSON with passwords.
Affected products
4- Range: <=2.0.4
- AxxonSoft/AxxonNet ARP Agent C-WerkNetv5Range: 0
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
1News mentions
0No linked articles in our index yet.