CVE-2025-10227: Lack of Encryption in Object Archive in AxxonSoft Axxon One (C-Werk) before 2.0.8
Missing Encryption of Sensitive Data (CWE-311) in the Object Archive component in AxxonSoft Axxon One (C-Werk) before 2.0.8 on Windows and Linux allows a local attacker with access to exported storage or stolen physical drives to extract sensitive archive data in plaintext via lack of encryption at rest.
Affected Software
Remediation
Information
Event History
Frequently Asked Questions
What is the severity of CVE-2025-10227?
CVE-2025-10227 is classified as a high severity vulnerability due to the potential exposure of sensitive data.
How do I fix CVE-2025-10227?
To fix CVE-2025-10227, upgrade AxxonSoft Axxon One to version 2.0.8 or later.
What systems are affected by CVE-2025-10227?
CVE-2025-10227 affects AxxonSoft Axxon One versions prior to 2.0.8 on both Windows and Linux systems.
What type of data is at risk due to CVE-2025-10227?
CVE-2025-10227 puts sensitive archive data at risk as it can be extracted in plaintext.
Who is primarily at risk from CVE-2025-10227?
Local attackers with access to exported storage or stolen physical drives are primarily at risk from CVE-2025-10227.