Unquoted File Path Vulnerability in Optical Disc Archive Software by Sony Corporation
CVE-2025-62225

8.4HIGH

Key Information:

Vendor

Sony Corporation

Status
Optical Disc Archive Software (for Windows)
Vendor
CVE Published:
5 November 2025

What is CVE-2025-62225?

The Optical Disc Archive Software provided by Sony Corporation contains a vulnerability stemming from the registration of a Windows service with an unquoted file path. This flaw enables users with write permissions on the root directory of the system drive to potentially execute arbitrary code with SYSTEM privileges. This could lead to severe security risks, making it imperative for users to review their configurations and update to secure versions of the software.

Affected Version(s)

Optical Disc Archive Software (for Windows) 1.0.0 to 5.5.2

References

https://www.sony.jp/oda/application/?srsltid=AfmBOoo8t7k-...
https://jvn.jp/en/jp/JVN81917433/

CVSS V4

Score:
8.4
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

CVSS V3.0

Score:
6.7
Severity:
MEDIUM
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
High
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.
CVE-2025-62225 : Unquoted File Path Vulnerability in Optical Disc Archive Software by Sony Corporation