Skip to content
CVE PROGRAM SOURCE RECORD6.7 Medium

CVE-2025-10221

Hardcoded Password Exposure in AxxonNet (C-WerkNet) ARP Agent Logs

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
AxxonSoft

Description

Insertion of Sensitive Information into Log File (CWE-532) in the ARP Agent component in AxxonSoft Axxon One / AxxonNet / C-WerkNet 2.0.4 and earlier on Windows platforms allows a local attacker to obtain plaintext credentials via reading TRACE log files containing serialized JSON with passwords.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

AxxonSoft AxxonNet ARP Agent C-WerkNet

Default version status: unaffected

  • 0 to ≤ 2.0.4affected

References