VIR Vulnerability Intelligence Relay

CVE-2025-23006

unknown KEV
Published 2025-01-24 · Modified 2025-01-24
CVSS v3
—
CVSS v2
—
VIR risk
1.5

Description

SonicWall SMA1000 Appliance Management Console (AMC) and Central Management Console (CMC) contain a deserialization of untrusted data vulnerability, which can enable a remote, unauthenticated attacker to execute arbitrary OS commands.

CISA KEV

Vendor
SonicWall
Product
SMA1000 Appliances
Due date
2025-02-14

Predictions

Exploit likelihood
99%
Patch ETA
—

Heuristic predictions, AS-IS, for prioritization only.

Mitigations

vendor Authored 2026-05-27

Vendor advisory: cisa-kev — https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2025-0002 ; https://nvd.nist.gov/vuln/detail/CVE-2025-23006

Exploits

References

Verify integrity in audit chain (admin only). AS-IS.