Detections
Analytics
Sony Camera SNC-CX600W Cross-site scripting (CVE-2025-64730)
medium Tenable OT Security Plugin ID 504815
Synopsis
The remote OT asset is affected by a vulnerability.Description
Cross-site scripting vulnerability exists in SNC-CX600W. If this vulnerability is exploited, an arbitrary script may be executed on the web browser of the user who accessed the product.This plugin only works with Tenable.ot.
Please visit https://www.tenable.com/products/tenable-ot for more information.
Solution
Refer to the vendor advisory.See Also
https://jvn.jp/en/jp/JVN75140384/
https://www.sony.com/electronics/support/ip-cameras-fixed/snc-cx600w
Plugin Details
Severity: Medium
ID: 504815
File Name: tenable_ot_sony_CVE-2025-64730.nasl
Version: 1.2
Type: remote
Family: Tenable.ot
Published: 12/4/2025
Updated: 2/26/2026
Supported Sensors: Tenable OT Security
Risk Information
VPR
Risk Factor: Low
Score: 3.0
CVSS v2
Risk Factor: Medium
Base Score: 6.4
Temporal Score: 4.7
Vector: CVSS2#AV:N/AC:L/Au:N/C:P/I:P/A:N
CVSS Score Source: CVE-2025-64730
CVSS v3
Risk Factor: Medium
Base Score: 6.1
Temporal Score: 5.3
Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Temporal Vector: CVSS:3.0/E:U/RL:O/RC:C
CVSS v4
Risk Factor: Medium
Base Score: 4.8
Threat Score: 1.1
Threat Vector: CVSS:4.0/E:U
Vector: CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N
Vulnerability Information
CPE: cpe:/o:sony:snc-cx600w_firmware
Required KB Items: Tenable.ot/Sony
Exploit Ease: No known exploits are available
Patch Publication Date: 11/25/2025
Vulnerability Publication Date: 11/25/2025
Reference Information
CVE: CVE-2025-64730
CWE: 79