Medium severity6.6CISA KEVNVD Advisory· Published Dec 18, 2025· Updated Jun 17, 2026

CVE-2025-40602

Description

A local privilege escalation vulnerability due to insufficient authorization in the SonicWall SMA1000 appliance management console (AMC).

SonicWall/Sma8200v
cpe:2.3:a:sonicwall:sma8200v:*:*:*:*:*:*:*:*
Range: <12.4.3-03245
SonicWall/Sma6200 Firmware
cpe:2.3:o:sonicwall:sma6200_firmware:*:*:*:*:*:*:*:*
Range: <12.4.3-03245
SonicWall/Sma7210 Firmware2 versions
cpe:2.3:o:sonicwall:sma6210_firmware:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:o:sonicwall:sma6210_firmware:*:*:*:*:*:*:*:*range: <12.4.3-03245
- cpe:2.3:o:sonicwall:sma7210_firmware:*:*:*:*:*:*:*:*range: <12.4.3-03245
SonicWall/Sma7200 Firmware
cpe:2.3:o:sonicwall:sma7200_firmware:*:*:*:*:*:*:*:*
Range: <12.4.3-03245
SonicWall/SMA1000 Appliance Management Consolellm-fuzzy
SonicWall/SMA100cpe-rescue
Range: 12.4.3-03093 (platform-hotfix) and earlier versions