CVE-2025-23006—SonicWall SMA1000 Appliances Deserialization Vulnerability

Vulnerability Name

SonicWall SMA1000 Appliances Deserialization Vulnerability

Description

SonicWall SMA1000 Appliance Management Console (AMC) and Central Management Console (CMC) contain a deserialization of untrusted data vulnerability, which can enable a remote, unauthenticated attacker to execute arbitrary OS commands.

Known To Be Used in Ransomware Campaigns?

Ransomware Status:

KNOWN

Action

Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.

Additional Notes

• https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2025-0002
• https://nvd.nist.gov/vuln/detail/CVE-2025-23006

Related News Articles

• SonicWall Fixes Actively Exploited CVE-2025-40602 in SMA 100 AppliancesDecember 17, 2025
• Exploited SonicWall zero-day patched (CVE-2025-40602)December 17, 2025
• Actively exploited SonicWall zero-day patched (CVE-2025-40602)December 17, 2025
• Sonicwall SMA100 vulnerability exploited by attackers (CVE-2021-20035)April 18, 2025
• ⚡ THN Weekly Recap: Top Cybersecurity Threats, Tools and Tips [27 January]January 27, 2025

Related Weaknesses

• CWE-502