CVE-2025-23006—SonicWall SMA1000 Appliances Deserialization Vulnerability

漏洞名称

SonicWall SMA1000 Appliances Deserialization Vulnerability

描述

SonicWall SMA1000 Appliance Management Console (AMC) and Central Management Console (CMC) contain a deserialization of untrusted data vulnerability, which can enable a remote, unauthenticated attacker to execute arbitrary OS commands.

已知用于勒索软件活动吗？

勒索软件状态：

KNOWN

采集行动

Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.

其他说明

• https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2025-0002
• https://nvd.nist.gov/vuln/detail/CVE-2025-23006

相关新闻文章

• SonicWall Fixes Actively Exploited CVE-2025-40602 in SMA 100 AppliancesDecember 17, 2025
• Exploited SonicWall zero-day patched (CVE-2025-40602)December 17, 2025
• Actively exploited SonicWall zero-day patched (CVE-2025-40602)December 17, 2025
• Sonicwall SMA100 vulnerability exploited by attackers (CVE-2021-20035)April 18, 2025
• ⚡ THN Weekly Recap: Top Cybersecurity Threats, Tools and Tips [27 January]January 27, 2025

相关 CWE

• CWE-502