SonicWall warns of actively exploited flaw in SMA 100 AMC
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2025-23006 | Unauthenticated Deserialization RCE in SonicWall SMA1000 Appliances | 9.8 | 27% | KEVRansomware | KEV |
| CVE-2025-40602 | Missing Authorization Flaw in SonicWall SMA1000 Appliance Management Console | 6.6 | 3% | KEV | KEV |
From the original article
1 min read at securityaffairs.com
SonicWall warned users to patch a SMA1000 AMC flaw that was exploited as a zero-day privilege escalation vulnerability in attacks. SonicWall urged customers to address a vulnerability, tracked as CVE-2025-40602, in the SMA1000 Appliance Management Console that was exploited as a zero-day in attacks in the wild.
By @securityaffairs · securityaffairs.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.