CVE-2025-10221 — Hardcoded Password Exposure in AxxonNet (C-WerkNet) ARP Agent Logs

CVE-2025-10221

Hardcoded Password Exposure in AxxonNet (C-WerkNet) ARP Agent Logs PUBLISHED

Description (CNA)

Insertion of Sensitive Information into Log File (CWE-532) in the ARP Agent component in AxxonSoft Axxon One / AxxonNet / C-WerkNet 2.0.4 and earlier on Windows platforms allows a local attacker to obtain plaintext credentials via reading TRACE log files containing serialized JSON with passwords.

Affected (CNA)

Vendor / product	Versions
AxxonSoft / AxxonNet ARP Agent C-WerkNet	affected 0 through 2.0.4

CWE

CWE-532

References

https://www.axxonsoft.com/legal/axxonsoft-vulnerability-disclosure-policy/security-advisories

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.