CVE-2025-10221CWE-532

CVE-2025-10221

Medium · published September 10, 2025

CVSS v3.1
5.5
EPSS
0%
Percentile
2.3
In the wild
Unconfirmed
What it is

Insertion of Sensitive Information into Log File (CWE-532) in the ARP Agent component in AxxonSoft Axxon One / AxxonNet / C-WerkNet 2.0.4 and earlier on Windows platforms allows a local attacker to obtain plaintext credentials via reading TRACE log files containing serialized JSON with passwords.

The record
Technical detail
CVSS v3.1
5.5 · MEDIUM
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00129 · 2.3th percentile
Weakness
CWE-532 · Insertion of Sensitive Information into Log File
Published
2025-09-10T17:15Z
Affected products (1)
ProductVersionsFixed in
axxonsoft/axxon_one≤ 2.0.4—
References (1)
https://www.axxonsoft.com/legal/axxonsoft-vulnerability-disclosure-policy/security-advisories · 15ede60e-6fda-426e-be9c-e788f151a377
EPSS history
Timeline
  • 10 SEP 12:31Z
    Hardcoded Password Exposure in AxxonNet (C-WerkNet) ARP Agent Logs
    cvelistv5