CVE-2025-40602: medium-severity vulnerability in SonicWall SMA1000
Published
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
Prioritize patching. It under exploitation confirmed by CISA and has a public proof of concept.
Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable
The SonicWall SMA1000 management console fails to properly check user permissions, allowing someone with local access to gain higher privileges than they should have.
This authorization bypass vulnerability (CWE-862) in the AMC permits local users to escalate privileges through insufficient permission validation mechanisms. An authenticated attacker with low-privilege local access can exploit this to perform administrative functions without proper authorization checks.
The full analysis of this CVE is available in Portuguese →
In the same product, most dangerous first.