CVE-2025-23006

🗓️ 23 Jan 2025 11:37:41Reported by sonicwallType

cve🔗 web.nvd.nist.gov📰️ 5 Media mentions👁 337 Views

Pre-authentication deserialization vulnerability in SMA1000 could allow remote command execution.

Reporter	Title	Published	Views	Family All 20
ATTACKERKB	CVE-2025-23006	23 Jan 202500:00	–	attackerkb
Circl	CVE-2025-23006	23 Jan 202509:24	–	circl
CISA KEV Catalog	SonicWall SMA1000 Appliances Deserialization Vulnerability	24 Jan 202500:00	–	cisa_kev
CISA	CISA Adds One Known Exploited Vulnerability to Catalog	24 Jan 202512:00	–	cisa
CNNVD	SonicWALL SMA1000 代码问题漏洞	23 Jan 202500:00	–	cnnvd
Cvelist	CVE-2025-23006	23 Jan 202511:37	–	cvelist
GithubExploit	Exploit for CVE-2025-40602	18 Dec 202507:32	–	githubexploit
HackRead	SonicWall SMA Appliances Exploited in Zero-Day Attacks	27 Jan 202511:11	–	hackread
NCSC	Vulnerability fixed in SonicWall SMA1000 Appliance	23 Jan 202513:50	–	ncsc
NVD	CVE-2025-23006	23 Jan 202512:15	–	nvd

NVD

Vulners

Node

sonicwall sma8200vRange<12.4.3-02854

Node

sonicwall sma6200_firmwareRange<12.4.3-02854

AND

sonicwall sma6200Match-

Node

sonicwall sma6210_firmwareRange<12.4.3-02854

AND

sonicwall sma6210Match-

Node

sonicwall sma7200_firmwareRange<12.4.3-02854

AND

sonicwall sma7200Match-

Node

sonicwall sma7210_firmwareRange<12.4.3-02854

AND

sonicwall sma7210Match-

Node

sonicwall sra_ex6000_firmwareRange≤12.4.3-02804

AND

sonicwall sra_ex6000Match-

Node

sonicwall sra_ex7000_firmwareRange≤12.4.3-02804

AND

sonicwall sra_ex7000Match-

Node

sonicwall sra_ex9000_firmwareRange≤12.4.3-02804

AND

sonicwall sra_ex9000Match-

[
  {
    "defaultStatus": "unknown",
    "platforms": [
      "Linux"
    ],
    "product": "SMA1000",
    "vendor": "SonicWall",
    "versions": [
      {
        "status": "affected",
        "version": "12.4.3-02804 (platform-hotfix) and earlier versions."
      }
    ]
  }
]