Information Disclosure Vulnerability in AxxonSoft Axxon One VMS
CVE-2025-10222

4.8MEDIUM

Key Information:

Vendor

Axxonsoft

Status
Axxonone C-werk
Vendor
CVE Published:
10 September 2025

What is CVE-2025-10222?

AxxonSoft Axxon One VMS versions 2.0.0 and 2.0.1 on Windows have a vulnerability in the diagnostic dump component that potentially exposes sensitive licensing information to local attackers. Through access to diagnostic export files, unauthorized individuals can extract critical data including license states, timestamps, and registry values. This exposure could lead to further exploitation of the system, underscoring the importance of securing these diagnostic tools and files.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

Affected Version(s)

AxxonOne C-Werk Windows 2.0.0 <= 2.0.1

References

https://www.axxonsoft.com/legal/axxonsoft-vulnerability-d...

CVSS V4

Score:
4.8
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
None
Availability:
None
Attack Vector:
Local
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

This vulnerability was discovered internally by the AxxonSoft QA team.
JSON
.