← All advisories

Unrated severityCISA KEVNVD Advisory· Published Dec 18, 2025· Updated Dec 18, 2025

CVE-2025-40602

CVE-2025-40602

Description

A local privilege escalation vulnerability due to insufficient authorization in the SonicWall SMA1000 appliance management console (AMC).

Affected products

2

SonicWall/SMA1000 seriesllm-fuzzy
SonicWall/SMA100cpe-rescue
Range: 12.4.3-03093 (platform-hotfix) and earlier versions

Patches

Vulnerability mechanics

References

1

psirt.global.sonicwall.com/vuln-detail/SNWLID-2025-0019mitrevendor-advisory

News mentions

0

No linked articles in our index yet.