Critical severity9.8CISA KEVNVD Advisory· Published Jan 23, 2025· Updated Aug 4, 2026
CVE-2025-23006
CVE-2025-23006
Description
Pre-authentication deserialization of untrusted data vulnerability has been identified in the SMA1000 Appliance Management Console (AMC) and Central Management Console (CMC), which in specific conditions could potentially enable a remote unauthenticated attacker to execute arbitrary OS commands.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
11cpe:2.3:o:sonicwall:sma6210_firmware:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:o:sonicwall:sma6210_firmware:*:*:*:*:*:*:*:*range: <12.4.3-02854
- cpe:2.3:o:sonicwall:sma7210_firmware:*:*:*:*:*:*:*:*range: <12.4.3-02854
- cpe:2.3:o:sonicwall:sra_ex6000_firmware:*:*:*:*:*:*:*:*Range: <=12.4.3-02804
- cpe:2.3:o:sonicwall:sra_ex7000_firmware:*:*:*:*:*:*:*:*Range: <=12.4.3-02804
- cpe:2.3:o:sonicwall:sra_ex9000_firmware:*:*:*:*:*:*:*:*Range: <=12.4.3-02804
Patches
Vulnerability mechanics
References
2- psirt.global.sonicwall.com/vuln-detail/SNWLID-2025-0002nvdVendor Advisory
- www.cisa.gov/known-exploited-vulnerabilities-catalognvdUS Government Resource
News mentions
3- CVE-2026-15409, CVE-2026-15410: SonicWall SMA 1000 zero-day vulnerabilities exploited in the wildTenable Blog · Jul 15, 2026
- Top 10 Best Unified Threat Management (UTM) Solutions in 2026Cyber Security News · Jul 10, 2026
- Top 10 Best Next-Generation Firewall (NGFW) Solutions in 2026Cyber Security News · Jul 6, 2026