CVE-2025-10227 — Lack of Encryption in Object Archive in AxxonSoft Axxon One (C-Werk) before 2.0.8

CVE-2025-10227

Lack of Encryption in Object Archive in AxxonSoft Axxon One (C-Werk) before 2.0.8 PUBLISHED

Description (CNA)

Missing Encryption of Sensitive Data (CWE-311) in the Object Archive component in AxxonSoft Axxon One (C-Werk) before 2.0.8 on Windows and Linux allows a local attacker with access to exported storage or stolen physical drives to extract sensitive archive data in plaintext via lack of encryption at rest.

Affected (CNA)

Vendor / product	Versions
AxxonSoft / AxxonOne C-Werk	affected 0 through 2.0.8

CWE

CWE-311

References

https://www.axxonsoft.com/legal/axxonsoft-vulnerability-disclosure-policy/security-advisories

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.