CVE-2025-23006
Pre-authentication deserialization of untrusted data vulnerability has been identified in the SMA1000 Appliance Management Console (AMC) and Central Management Console (CMC), which in specific conditions could potentially enable a remote unauthenticated attacker to execute arbitrary OS commands.
- Score
- CVSS 3.1 9.8 Critical
- Status
- Analyzed - PSIRT@sonicwall.com
- Published
- 2025-01-23
- Last modified
- 2026-08-04
- Known exploited (CISA KEV)
- since 2025-01-24, action due 2025-02-14: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
- Weaknesses
- CWE-502
Affected products
- Sma1000 (Sonicwall)
- Sma6200 Firmware (Sonicwall)
- Sma6210 Firmware (Sonicwall)
- Sma7200 Firmware (Sonicwall)
- Sma7210 Firmware (Sonicwall)
- Sma8200v (Sonicwall)
- Sra Ex6000 Firmware (Sonicwall)
- Sra Ex7000 Firmware (Sonicwall)
- Sra Ex9000 Firmware (Sonicwall)
References
- https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2025-0002
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2025-23006
