Information Disclosure Vulnerability in AxxonSoft Axxon One VMS
CVE-2025-10222

4.8MEDIUM

Key Information:

Vendor

Axxonsoft

Status
Axxonone
Vendor
CVE Published:
10 September 2025

What is CVE-2025-10222?

AxxonSoft Axxon One VMS versions 2.0.0 and 2.0.1 on Windows have a vulnerability in the diagnostic dump component that potentially exposes sensitive licensing information to local attackers. Through access to diagnostic export files, unauthorized individuals can extract critical data including license states, timestamps, and registry values. This exposure could lead to further exploitation of the system, underscoring the importance of securing these diagnostic tools and files.

Affected Version(s)

AxxonOne Windows 2.0.0 <= 2.0.1

References

https://www.axxonsoft.com/legal/axxonsoft-vulnerability-d...

CVSS V4

Score:
4.8
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
None
Availability:
None
Attack Vector:
Local
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

This vulnerability was discovered internally by the AxxonSoft QA team.
.
CVE-2025-10222 : Information Disclosure Vulnerability in AxxonSoft Axxon One VMS