CVE-2025-10220 — Outdated Third-Party NuGet Packages in AxxonSoft Axxon One VMS 2.0.0 through 2.0.4

CVE-2025-10220

Outdated Third-Party NuGet Packages in AxxonSoft Axxon One VMS 2.0.0 through 2.0.4 PUBLISHED

Description (CNA)

Use of Unmaintained Third Party Components (CWE-1104) in the NuGet dependency components in AxxonSoft Axxon One VMS 2.0.0 through 2.0.4 on Windows allows a remote attacker to execute arbitrary code or bypass security features via exploitation of vulnerable third-party packages such as Google.Protobuf, DynamicData, System.Runtime.CompilerServices.Unsafe, and others.

Affected (CNA)

Vendor / product	Versions
AxxonSoft / AxxonOne C-Werk	affected 2.0.0 through 2.0.4

CWE

CWE-1104

References

https://www.axxonsoft.com/legal/axxonsoft-vulnerability-disclosure-policy/security-advisories

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.