CVE-2025-23006: SonicWall SMA1000 Appliances Deserialization Vulnerability
SonicWall SMA1000 Appliance Management Console (AMC) and Central Management Console (CMC) contain a deserialization of untrusted data vulnerability, which can enable a remote, unauthenticated attacker to execute arbitrary OS commands. Required action: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
· high severity · unattributed attribution
Evidence and provenance
- Original source
- CISA KEV report ↗
- Published
- 2025-01-24T00:00:00Z
- Confidence basis
- No actor match
- Record ID
644cc4bc0bc5d40719ee
Vulnerabilities
CVE-2025-23006
Use and citation
Verify the original report before making operational decisions. Cite this permanent page together with the original source, publication date, confidence level, and review status.