45 matches found
CVE-2025-40602
CVE-2025-40602 📌 概述 CVE-2025-40602 是一个影响 SonicWall Secure Mobile Access SMA 1000 系列设备的本地权限提升漏洞 。 该缺陷存在于 设备管理控制台 AMC ，原因是授权检查不足 ，允许通过身份验证的低权限用户提升权限。 该漏洞已被观察到在野外积极利用 ，尤其是在与其他漏洞结合使用时，可实现对系统的完全入侵。 📝 漏洞描述 该漏洞允许对 SonicWall SMA 1000 管理界面具有受限访问权限 的攻击者执行超出其分配权限的操作。 成功利用后，攻击者可以： 将权限提升到管理员或 root 级别 修改系统配置...
CVE-2025-40602
CVE-2025-40602 CVE-2025-40602 是 SonicWall Secure Mobile Access SMA 1000 系列设备管理控制台 AMC 中的一个本地权限提升漏洞。该漏洞源于 AMC 中的授权不足，允许经过身份验证的远程攻击者在受影响设备上提升权限。当与 CVE-2025-23006 链式利用时，攻击者可以实现未经身份验证的远程代码执行并获得 root 权限。此零日漏洞已在野外被积极利用，并于 2025 年 12 月 17 日被添加到 CISA 的已知被利用漏洞目录中。 此检测方法如何工作？ 此 Nuclei...
EUVD-2026-69707
Post-authentication Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability has been identified in the SMA1000 Appliance Management Console AMC which in specific conditions could potentially enable a remote authenticated attacker as administrator to...
Zero-day vulnerabilities are exploited in SonicWall SMA1000 devices.
SonicWall has identified two vulnerabilities in the SonicWall SMA1000 appliance. The vulnerability with the identifier CVE-2026-15409 involves Server-Side Request Forgery SSRF in the Work Place interface, allowing an unauthorized attacker to send requests to the device to unintended locations. Th...
CVE-2026-15410
Post-authentication improper control of generation of code 'Code Injection' vulnerability has been identified in the SMA1000 Appliance Management Console AMC which in specific conditions could potentially enable a remote authenticated attacker as administrator to execute arbitrary OS commands...
CVE-2026-15410
Post-authentication improper control of generation of code 'Code Injection' vulnerability has been identified in the SMA1000 Appliance Management Console AMC which in specific conditions could potentially enable a remote authenticated attacker as administrator to execute arbitrary OS commands...
CVE-2026-15410
Post-authentication improper control of generation of code 'Code Injection' vulnerability has been identified in the SMA1000 Appliance Management Console AMC which in specific conditions could potentially enable a remote authenticated attacker as administrator to execute arbitrary OS commands...
VulnCheck KEV: CVE-2026-15410
Post-authentication improper control of generation of code 'Code Injection' vulnerability has been identified in the SMA1000 Appliance Management Console AMC which in specific conditions could potentially enable a remote authenticated attacker as administrator to execute arbitrary OS commands...
CVE-2021-22014
The vCenter Server contains an authenticated code execution vulnerability in VAMI Virtual Appliance Management Infrastructure. An authenticated VAMI user with network access to port 5480 on vCenter Server may exploit this issue to execute code on the underlying operating system that hosts vCenter...
CVE-2025-40602
A local privilege escalation vulnerability due to insufficient authorization in the SonicWall SMA1000 appliance management console AMC...
EUVD-2025-204255
A local privilege escalation vulnerability due to insufficient authorization in the SonicWall SMA1000 appliance management console AMC...
CVE-2025-40602
A local privilege escalation vulnerability due to insufficient authorization in the SonicWall SMA1000 appliance management console AMC...
CVE-2025-40602
A local privilege escalation vulnerability due to insufficient authorization in the SonicWall SMA1000 appliance management console AMC...
CVE-2025-40602
A local privilege escalation vulnerability due to insufficient authorization in the SonicWall SMA1000 appliance management console AMC...
CVE-2025-40602
CVE-2025-40602 describes a local privilege escalation in SonicWall SMA1000 appliance management console (AMC) caused by missing/insufficient authorization. Affected devices are SMA1000 series appliances; the issue permits a privileged escalation on affected devices, with potential chaining to ach...
Exploit for CVE-2025-40602
CVE-2025-40602 CVE-2025-40602 is a local privilege escalatio...
SonicWall SMA1000 Missing Authorization Vulnerability
SonicWall SMA1000 contains a missing authorization vulnerability that could allow for privilege escalation appliance management console AMC of affected devices...
PT-2025-51891
Name of the Vulnerable Software and Affected Versions SonicWall SMA1000 versions prior to 12.4.3-03245 and 12.5.0-02283 SonicWall SMA 100 series appliances affected versions not specified Description A local privilege escalation vulnerability exists in the SonicWall SMA1000 appliance management...