CVE-2025-10225

Katalog CVE

CVSS 7.5 · High EPSS 0,40%

Kerentanan Improper Restriction of Operations within the Bounds of a Memory Buffer pada axxonsoft axxon one. Skor CVSS 3.1 7.5 (High) menurut CNA.

Deskripsi (NVD)

Improper Restriction of Operations within the Bounds of a Memory Buffer (CWE-119) in the OpenSSL-based session module in AxxonSoft Axxon One (C-Werk) 2.0.6 and earlier on Windows allows a remote attacker under high load conditions to cause application crashes or unpredictable behavior via triggering memory reallocation errors when handling expired session keys.

Rincian

Terbit di NVD

10 September 2025

Terakhir diubah

26 September 2026

Status NVD

Modified

CVSS 3.1

7.5 (High), sumber CNA
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer

EPSS (30 hari)

0,40% peluang dieksploitasi; lebih tinggi dari 32,2% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://www.axxonsoft.com/legal/axxonsoft-vulnerability-disclosure-policy/security-advisories advisory vendor