Skip to content
CVE PROGRAM SOURCE RECORD9.8 Critical

CVE-2025-23006

Pre-authentication deserialization of untrusted data vulnerability has been identified in the SMA1000 Appliance Management Console (AMC) and Central Management Console (CMC), which

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
sonicwall

Description

Pre-authentication deserialization of untrusted data vulnerability has been identified in the SMA1000 Appliance Management Console (AMC) and Central Management Console (CMC), which in specific conditions could potentially enable a remote unauthenticated attacker to execute arbitrary OS commands.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

SonicWall SMA1000

Default version status: unknown

  • 12.4.3-02804 (platform-hotfix) and earlier versions.affected

References