High severity7.2NVD Advisory· Published Nov 14, 2025· Updated Apr 15, 2026

CVE-2025-64444

Description

Improper neutralization of special elements used in an OS command ('OS Command Injection') issue exists in NCP-HG100 1.4.48.16 and earlier. If exploited, a remote attacker who has obtained the authentication information to log in to the management page of the product may execute an arbitrary OS command with root privileges.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Sony/NCP-HG100llm-create
Range: <=1.4.48.16

Patches

Vulnerability mechanics

References

jvn.jp/en/jp/JVN49899607/nvd
support.sonynetwork.co.jp/faqsupport/manoma/web/knowledge11157.htmlnvd

News mentions

No linked articles in our index yet.

cvss	0.468
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000