CVE-2025-62225: High severity Sony Optical Disc Archive Software vulnerability
Optical Disc Archive Software provided by Sony Corporation registers a Windows service with an unquoted file path. A user with the write permission on the root directory of the system drive may execute arbitrary code with SYSTEM privilege.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-62225?
CVE-2025-62225 is classified as a high severity vulnerability due to its potential to allow arbitrary code execution with SYSTEM privileges.
How do I fix CVE-2025-62225?
To resolve CVE-2025-62225, it is recommended to update to the latest version of the Sony Optical Disc Archive Software that addresses this vulnerability.
Who is affected by CVE-2025-62225?
Users of Sony Optical Disc Archive Software who have write permissions on the root directory of the system drive are affected by CVE-2025-62225.
What can an attacker do with CVE-2025-62225?
An attacker could exploit CVE-2025-62225 to execute arbitrary code with SYSTEM privileges, potentially compromising the entire system.
Is CVE-2025-62225 being actively exploited?
As of now, there are no public reports indicating active exploitation of CVE-2025-62225, but it is advisable to mitigate the risk by applying necessary updates.