PT-2025-48402 · Sony · Inzone Hub

Published 2025-12-01 · Updated 2025-12-01 · CVE-2025-64772

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions INZONE Hub versions 1.0.10.3 through 1.0.17.0

Description The installer for the software contains a flaw in how it searches for and loads Dynamic Link Libraries (DLLs). This could allow an attacker to load malicious DLLs, potentially leading to the execution of arbitrary code with the privileges of the user running the installer.

Recommendations Update INZONE Hub to a version newer than 1.0.17.0.

Fix

Uncontrolled Search Path Element

Weakness Enumeration

CWE-427

Related Identifiers

CVE-2025-64772

Affected Products

Inzone Hub

References · 8

• https://nvd.nist.gov/vuln/detail/CVE-2025-64772 · Security Note
• https://jvn.jp/en/jp/JVN28247549 · Note
• https://t.me/CVEtracker/38497 · Telegram Post
• https://twitter.com/offseq/status/1995305159203664323 · Twitter Post
• https://twitter.com/CVEnew/status/1995332975274381443 · Twitter Post
• https://twitter.com/VulmonFeeds/status/1995310048973656248 · Twitter Post
• https://t.me/cveNotify/144358 · Telegram Post
• https://sony.com/electronics/support/others-software/inzone-hub · Note