← Database

CVE-2025-10225

HIGH CVSS: 7.5 Published: 2025-09-10 Modified: 2026-06-17

Description

Improper Restriction of Operations within the Bounds of a Memory Buffer (CWE-119) in the OpenSSL-based session module in AxxonSoft Axxon One (C-Werk) 2.0.6 and earlier on Windows allows a remote attacker under high load conditions to cause application crashes or unpredictable behavior via triggering memory reallocation errors when handling expired session keys.

Affected Platforms

Axxonsoft Axxon One

Weakness Type

CWE-119

References