← Database

CVE-2025-23006

CRITICAL CVSS: 9.8 Published: 2025-01-23 Modified: 2026-08-04

Description

Pre-authentication deserialization of untrusted data vulnerability has been identified in the SMA1000 Appliance Management Console (AMC) and Central Management Console (CMC), which in specific conditions could potentially enable a remote unauthenticated attacker to execute arbitrary OS commands.

Affected Platforms

Sonicwall Sma6200Sonicwall Sma6210Sonicwall Sma7210 FirmwareSonicwall Sra Ex6000Sonicwall Sma6200 FirmwareSonicwall Sma8200VSonicwall Sma6210 FirmwareSonicwall Sra Ex6000 FirmwareSonicwall Sra Ex7000 FirmwareSonicwall Sra Ex9000 Firmware

Weakness Type

CWE-502

References