CVE-2025-23006criticalunder attackransomwareCWE-502

CVE-2025-23006: critical vulnerability in SonicWall SMA1000

Published · Updated

Follow this CVE+ Monitor SMA1000+ Monitor SMA1000 Appliances

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

63Vexday Risk Score

Prioritize patching. It under exploitation confirmed by CISA and has an official Brazilian government alert.

ssvc Actcvss 9.8epss 27%
from disclosure to weapon
Published on NVDJan 23
CISA KEV+1d
Official alert in Brazil

Brazil's federal government published an alert, recommendation or bulletin that cites this vulnerability.

  • CTIR Gov · ALERTA 02/2025Vulnerabilidade crítica nos produtos SonicWallread on gov.br ↗
Source: CTIR Gov (GSI) and CISC Gov.br, under the CC BY-ND 3.0 license.
Action required by CISAfederal deadline: 2025-02-14

Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.

In short

The SMA1000 management console accepts and processes untrusted data before verifying user identity, allowing attackers to run harmful commands on the system without authentication.

Technical detail

CWE-502 deserialization vulnerability in SMA1000 AMC/CMC accepts untrusted serialized objects pre-authentication, enabling remote unauthenticated arbitrary OS command execution under specific conditions through the management interface.

Summary generated and translated by AI from the official description.

The full analysis of this CVE is available in Portuguese →

Pre-authentication deserialization of untrusted data vulnerability has been identified in the SMA1000 Appliance Management Console (AMC) and Central Management Console (CMC), which in specific conditions could potentially enable a remote unauthenticated attacker to execute arbitrary OS commands.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Affected products
SonicWall · SMA1000
Related CVEs — SonicWall SMA1000

In the same product, most dangerous first.

CVE-2026-15410HIGHCVE-2026-15410EPSS 11.8%KEVCVE-2026-83549HIGHCVE-2026-83549EPSS 9.9%KEVCVE-2026-83548CRITICALCVE-2026-83548EPSS 8.0%KEVCVE-2026-15409CRITICALCVE-2026-15409EPSS 6.8%KEVCVE-2025-40602MEDIUMCVE-2025-40602EPSS 2.8%KEVCVE-2020-5129—CVE-2020-5129EPSS 1.3%