CVE-2025-23006

SonicWall SMA1000 Appliances Deserialization Vulnerability

Sma8200V

Pre-authentication deserialization of untrusted data vulnerability has been identified in the SMA1000 Appliance Management Console (AMC) and Central Management Console (CMC), which in specific conditions could potentially enable a remote unauthenticated attacker to execute arbitrary OS commands.

23. Jan 2025

Ausgewertete Quellen

• Hersteller
  https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2025-0002
• CISA
  https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2025-23006
• CISA
  SonicWall SMA1000 Appliances Deserialization Vulnerability
• NVD
  CVE-2025-23006