Medium severity4.6NVD Advisory· Published Sep 10, 2025· Updated Jun 17, 2026

CVE-2025-10227

Description

Missing Encryption of Sensitive Data (CWE-311) in the Object Archive component in AxxonSoft Axxon One (C-Werk) before 2.0.8 on Windows and Linux allows a local attacker with access to exported storage or stolen physical drives to extract sensitive archive data in plaintext via lack of encryption at rest.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

AxxonSoft/Axxon One VMSllm-fuzzy
Range: <2.0.8
AxxonSoft/Axxon One (C-Werk)cpe-rescue
Range: 0
AxxonSoft/Axxon One
cpe:2.3:a:axxonsoft:axxon_one:*:*:*:*:*:*:*:*
Range: <2.0.8

Patches

Vulnerability mechanics

References

www.axxonsoft.com/legal/axxonsoft-vulnerability-disclosure-policy/security-advisoriesnvdVendor Advisory

News mentions

No linked articles in our index yet.

cvss	0.299
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000