CVE-2025-23006 | Attaxion

CISA Known Exploited Vulnerability (KEV)

Name

SonicWall SMA1000 Appliances Deserialization Vulnerability

Exploit added

January 24, 2025

Action due

February 14, 2025

Action required

Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.

Description

Pre-authentication deserialization of untrusted data vulnerability has been identified in the SMA1000 Appliance Management Console (AMC) and Central Management Console (CMC), which in specific conditions could potentially enable a remote unauthenticated attacker to execute arbitrary OS commands.

References

https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2025-0002

Weakness Enumeration

CWE-ID	CWE Name
CWE-502	Deserialization of Untrusted Data

Known Affected Software Configurations

cpe:2.3:a:sonicwall:sma8200v:-:::::::*
cpe:2.3:a:sonicwall:sma8200v:12.4.3-02804:::::::*
cpe:2.3:o:sonicwall:sma6200_firmware:-:::::::*
cpe:2.3:o:sonicwall:sma6200_firmware:12.4.3-02804:::::::*
cpe:2.3:o:sonicwall:sma6210_firmware:-:::::::*
cpe:2.3:o:sonicwall:sma6210_firmware:12.4.3-02804:::::::*
cpe:2.3:o:sonicwall:sma7200_firmware:-:::::::*
cpe:2.3:o:sonicwall:sma7200_firmware:12.4.3-02804:::::::*
cpe:2.3:o:sonicwall:sma7210_firmware:-:::::::*
cpe:2.3:o:sonicwall:sma7210_firmware:12.4.3-02804:::::::*
cpe:2.3:o:sonicwall:sra_ex6000_firmware:-:::::::*
cpe:2.3:o:sonicwall:sra_ex6000_firmware:12.4.3-02804:::::::*
cpe:2.3:o:sonicwall:sra_ex7000_firmware:-:::::::*
cpe:2.3:o:sonicwall:sra_ex7000_firmware:12.4.3-02804:::::::*
cpe:2.3:o:sonicwall:sra_ex9000_firmware:-:::::::*
cpe:2.3:o:sonicwall:sra_ex9000_firmware:12.4.3-02804:::::::*

Details

Source:
NVD

Published:
January 23, 2025

Updated:
February 18, 2025

Risk information

CVSS v3

Base score:
9.8

Severity:

CRITICAL

Vector:
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CVSS v2

Not defined