CVE-2025-23006
🔥 Known Exploited (CISA KEV)CRITICAL
9.8
CVSS Severity Score
Vulnerability Description
Pre-authentication deserialization of untrusted data vulnerability has been identified in the SMA1000 Appliance Management Console (AMC) and Central Management Console (CMC), which in specific conditions could potentially enable a remote unauthenticated attacker to execute arbitrary OS commands.
Affected Platforms (CPE)
📦
Sonicwall
Sma8200v
< 12.4.3-02854
💻
Sonicwall
Sma6200 Firmware
< 12.4.3-02854
💻
Sonicwall
Sma6210 Firmware
< 12.4.3-02854
💻
Sonicwall
Sma7200 Firmware
< 12.4.3-02854