CVE-2025-10225: Incorrect Memory Allocation in OpenSSL-Based Session Module in AxxonSoft Axxon One (C-Werk)
Improper Restriction of Operations within the Bounds of a Memory Buffer (CWE-119) in the OpenSSL-based session module in AxxonSoft Axxon One (C-Werk) 2.0.6 and earlier on Windows allows a remote attacker under high load conditions to cause application crashes or unpredictable behavior via triggering memory reallocation errors when handling expired session keys.
Affected Software
Remediation
Information
Event History
Frequently Asked Questions
What is the severity of CVE-2025-10225?
The severity of CVE-2025-10225 is considered critical due to its potential to cause application crashes or unpredictable behavior.
How do I fix CVE-2025-10225?
To fix CVE-2025-10225, upgrade AxxonSoft Axxon One to version 2.0.7 or later.
What are the affected versions of AxxonSoft Axxon One in CVE-2025-10225?
Affected versions of AxxonSoft Axxon One include 2.0.6 and earlier.
Can CVE-2025-10225 be exploited remotely?
Yes, CVE-2025-10225 can be exploited remotely, especially under high load conditions.
What type of vulnerability is CVE-2025-10225?
CVE-2025-10225 is categorized as an Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability.