Skip to content
OpenAdvisories
High · 7.5 CVE-2025-10225 EUVD-2025-27539GHSA-vjj8-hw6c-w6xm

Incorrect Memory Allocation in OpenSSL-Based Session Module in AxxonSoft Axxon One (C-Werk)

Published Sep 10, 2025 · Updated Oct 8, 2025 · Assigned by AxxonSoft

Description

Improper Restriction of Operations within the Bounds of a Memory Buffer (CWE-119) in the OpenSSL-based session module in AxxonSoft Axxon One (C-Werk) 2.0.6 and earlier on Windows allows a remote attacker under high load conditions to cause application crashes or unpredictable behavior via triggering memory reallocation errors when handling expired session keys.

Affected products

VendorProductAffectedFixed
AxxonSoft AxxonOne C-Werk ≤ 2.0.6 —

References