What is the CVSS score of CVE-2025-64772?

CVE-2025-64772 has a CVSS 3.0 base score of 7.8 (High). CVSS vector: CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H. EPSS exploitation probability: 0.0%.

How to fix or mitigate CVE-2025-64772?

Within 24 hours: Identify all systems running INZONE Hub versions 1.0.10.3-1.0.17.0 and restrict installer execution to trusted administrative channels only. Within 7 days: Issue guidance prohibiting end-user installation of INZONE Hub and centralize deployment through IT-controlled channels; implement application whitelisting to prevent unauthorized DLL loading. Within 30 days: Monitor vendor for patch availability and establish expedited patching plan once released; conduct audit of affected systems for indicators of compromise.

CVE-2025-64772

EUVD-2025-199943 HIGH

Uncontrolled Search Path Element (CWE-427)

2025-12-01 vultures@jpcert.or.jp

RCE

7.8

CVSS 3.0 · NVD

Severity by source

NVD PRIMARY

7.8 HIGH

AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

Attack Vector

Local

Attack Complexity

Low

Privileges Required

None

User Interaction

Required

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

High

Lifecycle Timeline

EUVD ID Assigned

Mar 15, 2026 - 13:34 euvd

EUVD-2025-199943

Analysis Generated

Mar 15, 2026 - 13:34 vuln.today

CVE Published

Dec 01, 2025 - 01:16 nvd

HIGH 7.8

DescriptionCVE.org

The installer of INZONE Hub 1.0.10.3 to 1.0.17.0 contains an issue with the DLL search path, which may lead to insecurely loading Dynamic Link Libraries. As a result, arbitrary code may be executed with the privilege of the user invoking the installer.