CVE-2025-23006
CISA KEV RANSOMWARE
ACT NOW
Priority: 0.00
BB Relevance:
5/100
Published: N/A
Modified: N/A
First seen: 2026-10-29
Status: pending_score
Description
SonicWall SMA1000 Appliance Management Console (AMC) and Central Management Console (CMC) contain a deserialization of untrusted data vulnerability, which can enable a remote, unauthenticated attacker to execute arbitrary OS commands.
CISA Known Exploited Vulnerability
Vendor / Product
SonicWall — SMA1000 Appliances
Date Added
2025-01-24
Remediation Due
2025-02-14
Ransomware Use
CONFIRMED
https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2025-0002 ; https://nvd.nist.gov/vuln/detail/CVE-2025-23006
Weakness Classification (1)
Affected Software (8)
| Vendor | Product | Version |
|---|---|---|
| sonicwall | sma6200_firmware | < 12.4.3-02854 |
| sonicwall | sma6210_firmware | < 12.4.3-02854 |
| sonicwall | sma7200_firmware | < 12.4.3-02854 |
| sonicwall | sma7210_firmware | < 12.4.3-02854 |
| sonicwall | sma8200v | < 12.4.3-02854 |
| sonicwall | sra_ex6000_firmware | < 12.4.3-02804 |
| sonicwall | sra_ex7000_firmware | < 12.4.3-02804 |
| sonicwall | sra_ex9000_firmware | < 12.4.3-02804 |
References & Advisories (2)
Vendor Advisory
US Government Resource