Back to Database
Status published
Low
CVE-2025-62497
Cross-site request forgery vulnerability exists in SNC-CX600W versions prior to...
Vulnerability Description
Cross-site request forgery vulnerability exists in SNC-CX600W versions prior to Ver.2.8.0. If a user accesses a specially crafted webpage while logged in, unintended operations may be performed.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2025-62497
Credits & Attribution
No credits recorded in the NVD database.
References
More from Sony Corporation
View All →CVE-2025-64772
The installer of INZONE Hub 1.0.10.3 to 1.0.17.0 contains an...
High
8.4
CVE-2025-64730
Cross-site scripting vulnerability exists in SNC-CX600W all versions. If this...
Medium
4.8
CVE-2025-62225
Optical Disc Archive Software provided by Sony Corporation registers a...
High
8.4
CVE-2022-41796
Untrusted search path vulnerability in the installer of Content Transfer...
Unknown
0
CVE-2021-20793
Untrusted search path vulnerability in the installer of Sony Audio...
High
7.8
Affected Vendor
Sony Corporation
View all reports →Affected Software
SNC-CX600W
Vulnerable Versions:
versions prior to Ver.2.8.0
Timeline
Official Publish:
November 25th, 2025
Last Modified:
November 25th, 2025
Added to House:
July 22nd, 2026
CVSS Vectors
V3:
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N