CVE-2025-40602

🗓️ 18 Dec 2025 10:58:41Reported by sonicwallType

cve🔗 web.nvd.nist.gov📰️ 9 Media mentions👁 41 Views

Local privilege escalation due to insufficient authorization in SonicWall SMA1000 appliance management console.

Reporter	Title	Published	Views	Family All 17
Circl	CVE-2025-40602	17 Dec 202514:42	–	circl
CISA KEV Catalog	SonicWall SMA1000 Missing Authorization Vulnerability	17 Dec 202500:00	–	cisa_kev
CISA	CISA Adds Three Known Exploited Vulnerabilities to Catalog	17 Dec 202512:00	–	cisa
CNNVD	SonicWALL SMA1000 安全漏洞	18 Dec 202500:00	–	cnnvd
Cvelist	CVE-2025-40602	18 Dec 202510:58	–	cvelist
GithubExploit	Exploit for CVE-2025-40602	18 Dec 202507:32	–	githubexploit
EUVD	EUVD-2025-204255	18 Dec 202512:30	–	euvd
NVD	CVE-2025-40602	18 Dec 202511:15	–	nvd
OSV	CVE-2025-40602	18 Dec 202511:15	–	osv
Positive Technologies	PT-2025-51891	17 Dec 202500:00	–	ptsecurity

NVD

Vulners

Node

sonicwall sma6200_firmwareRange<12.4.3-03245

sonicwall sma6200_firmwareRange12.5.0–12.5.0-02283

AND

sonicwall sma6200Match-

Node

sonicwall sma6210_firmwareRange<12.4.3-03245

sonicwall sma6210_firmwareRange12.5.0–12.5.0-02283

AND

sonicwall sma6210Match-

Node

sonicwall sma7200_firmwareRange<12.4.3-03245

sonicwall sma7200_firmwareRange12.5.0–12.5.0-02283

AND

sonicwall sma7200Match-

Node

sonicwall sma7210_firmwareRange<12.4.3-03245

sonicwall sma7210_firmwareRange12.5.0–12.5.0-02283

AND

sonicwall sma7210Match-

Node

sonicwall sma8200vRange<12.4.3-03245

sonicwall sma8200vRange12.5.0–12.5.0-02283

[
  {
    "defaultStatus": "unknown",
    "platforms": [
      "Linux"
    ],
    "product": "SMA1000",
    "vendor": "SonicWall",
    "versions": [
      {
        "status": "affected",
        "version": "12.4.3-03093 (platform-hotfix) and earlier versions"
      },
      {
        "status": "affected",
        "version": "12.5.0-02002 (platform-hotfix) and earlier versions"
      }
    ]
  }
]

Source	Link
psirt	www.psirt.global.sonicwall.com/vuln-detail/SNWLID-2025-0019
cisa	www.cisa.gov/known-exploited-vulnerabilities-catalog

19 Dec 2025 13:57Current

6.7Medium risk

Vulners AI Score6.7

CVSS 3.16.6

EPSS0.00385

SSVC

local privilege escalation insufficient authorization SonicWall SMA1000 appliance management