26 matches found
CVE-2025-40602
CVE-2025-40602 CVE-2025-40602 是 SonicWall Secure Mobile Access SMA 1000 系列设备管理控制台 AMC 中的一个本地权限提升漏洞。该漏洞源于 AMC 中的授权不足，允许经过身份验证的远程攻击者在受影响设备上提升权限。当与 CVE-2025-23006 链式利用时，攻击者可以实现未经身份验证的远程代码执行并获得 root 权限。此零日漏洞已在野外被积极利用，并于 2025 年 12 月 17 日被添加到 CISA 的已知被利用漏洞目录中。 此检测方法如何工作？ 此 Nuclei...
CVE-2025-40602
CVE-2025-40602 📌 概述 CVE-2025-40602 是一个影响 SonicWall Secure Mobile Access SMA 1000 系列设备的本地权限提升漏洞 。 该缺陷存在于 设备管理控制台 AMC ，原因是授权检查不足 ，允许通过身份验证的低权限用户提升权限。 该漏洞已被观察到在野外积极利用 ，尤其是在与其他漏洞结合使用时，可实现对系统的完全入侵。 📝 漏洞描述 该漏洞允许对 SonicWall SMA 1000 管理界面具有受限访问权限 的攻击者执行超出其分配权限的操作。 成功利用后，攻击者可以： 将权限提升到管理员或 root 级别 修改系统配置...
CVE-2026-83549: Improper Neutralization of Special Elements used in an OS Command
Post-authentication Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability has been identified in the SMA1000 Appliance Management Console AMC which in specific conditions could potentially enable a remote authenticated attacker as administrator to...
Exploit for Server-Side Request Forgery in Sonicwall Sma6210_Firmware
...
Zero-day vulnerabilities are exploited in SonicWall SMA1000 devices.
SonicWall has identified two vulnerabilities in the SonicWall SMA1000 appliance. The vulnerability with the identifier CVE-2026-15409 involves Server-Side Request Forgery SSRF in the Work Place interface, allowing an unauthorized attacker to send requests to the device to unintended locations. Th...
EUVD-2026-44410
Post-authentication improper control of generation of code 'Code Injection' vulnerability has been identified in the SMA1000 Appliance Management Console AMC which in specific conditions could potentially enable a remote authenticated attacker as administrator to execute arbitrary OS commands...
CVE-2026-15410
Post-authentication improper control of generation of code 'Code Injection' vulnerability has been identified in the SMA1000 Appliance Management Console AMC which in specific conditions could potentially enable a remote authenticated attacker as administrator to execute arbitrary OS commands...
CVE-2026-15410
Post-authentication improper control of generation of code 'Code Injection' vulnerability has been identified in the SMA1000 Appliance Management Console AMC which in specific conditions could potentially enable a remote authenticated attacker as administrator to execute arbitrary OS commands...
CVE-2026-15410
Post-authentication improper control of generation of code 'Code Injection' vulnerability has been identified in the SMA1000 Appliance Management Console AMC which in specific conditions could potentially enable a remote authenticated attacker as administrator to execute arbitrary OS commands...
CVE-2026-15410
Post-authentication improper control of generation of code 'Code Injection' vulnerability has been identified in the SMA1000 Appliance Management Console AMC which in specific conditions could potentially enable a remote authenticated attacker as administrator to execute arbitrary OS commands...
VulnCheck KEV: CVE-2026-15410
SonicWall SMA1000 Appliances contain a code injection vulnerability which in specific conditions could potentially enable a remote authenticated attacker as administrator to execute arbitrary OS commands...
CVE-2026-15410: Improper Control of Generation of Code
Post-authentication improper control of generation of code 'Code Injection' vulnerability has been identified in the SMA1000 Appliance Management Console AMC which in specific conditions could potentially enable a remote authenticated attacker as administrator to execute arbitrary OS commands...
CVE-2025-40602
A local privilege escalation vulnerability due to insufficient authorization in the SonicWall SMA1000 appliance management console AMC...
EUVD-2025-204255
A local privilege escalation vulnerability due to insufficient authorization in the SonicWall SMA1000 appliance management console AMC...
CVE-2025-40602
A local privilege escalation vulnerability due to insufficient authorization in the SonicWall SMA1000 appliance management console AMC...
CVE-2025-40602
A local privilege escalation vulnerability due to insufficient authorization in the SonicWall SMA1000 appliance management console AMC...
Exploit for CVE-2025-40602
CVE-2025-40602 CVE-2025-40602 is a local privilege escalatio...
PT-2025-51891
Name of the Vulnerable Software and Affected Versions SonicWall SMA1000 versions prior to 12.4.3-03245 and 12.5.0-02283 SonicWall SMA 100 series appliances affected versions not specified Description A local privilege escalation vulnerability exists in the SonicWall SMA1000 appliance management...
SonicWall SMA1000 Missing Authorization Vulnerability
SonicWall SMA1000 contains a missing authorization vulnerability that could allow for privilege escalation appliance management console AMC of affected devices...