CameraRisk

CVE-2025-10221

AxxonSoft

Published
10 September 2025
Last modified
17 June 2026
CVSS
6.7 v4.0
Severity
medium
EPSS
0.1% (3th pct)
CISA KEV
Not listed
NVD status
Analyzed
Weaknesses
CWE-532

CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Description

Insertion of Sensitive Information into Log File (CWE-532) in the ARP Agent component in AxxonSoft Axxon One / AxxonNet / C-WerkNet 2.0.4 and earlier on Windows platforms allows a local attacker to obtain plaintext credentials via reading TRACE log files containing serialized JSON with passwords.

Exploitation

Not listed in the CISA Known Exploited Vulnerabilities catalogue as of 2026.09.04. That is an absence of confirmed public exploitation, not evidence that exploitation has not occurred. EPSS models a 0.1% probability of exploitation activity in the next 30 days.

Affected products

ProductVendorTypeVersions named
Axxon One AxxonSoft Video management software < 2.0.2, < 2.0.8, <= 2.0.2, <= 2.0.4 +3

References

Vendor advisory and patch

CVE-2025-10221 at NVD

Record assembled from NVD, CISA KEV 2026.09.04 and FIRST EPSS 2026-09-04. Affected products are those NVD's CPE configuration names that fall inside this site's scope; a CVE may affect products outside it.