Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2025-10220

Опубликовано: 10 сент. 2025
Источник: nvd
CVSS3: 9.8
EPSS Низкий

Описание

Use of Unmaintained Third Party Components (CWE-1104) in the NuGet dependency components in AxxonSoft Axxon One VMS 2.0.0 through 2.0.4 on Windows allows a remote attacker to execute arbitrary code or bypass security features via exploitation of vulnerable third-party packages such as Google.Protobuf, DynamicData, System.Runtime.CompilerServices.Unsafe, and others.

Уязвимые конфигурации

Конфигурация 1
cpe:2.3:a:axxonsoft:axxon_one:*:*:*:*:*:windows:*:*
Версия от 2.0.0 (включая) до 2.0.4 (включая)

EPSS

Процентиль: 45%
0.00227
Низкий

9.8 Critical

CVSS3

Дефекты

CWE-1104

Связанные уязвимости

CVSS3: 9.8
github
5 месяцев назад

Use of Unmaintained Third Party Components (CWE-1104) in the NuGet dependency components in AxxonSoft Axxon One VMS 2.0.0 through 2.0.4 on Windows allows a remote attacker to execute arbitrary code or bypass security features via exploitation of vulnerable third-party packages such as Google.Protobuf, DynamicData, System.Runtime.CompilerServices.Unsafe, and others.

EPSS

Процентиль: 45%
0.00227
Низкий

9.8 Critical

CVSS3

Дефекты

CWE-1104