CVE-2025-23006

Published Jan 23, 2025

Last updated 9 days ago

Exploit known CVSS critical 9.8

Overview

Description: Pre-authentication deserialization of untrusted data vulnerability has been identified in the SMA1000 Appliance Management Console (AMC) and Central Management Console (CMC), which in specific conditions could potentially enable a remote unauthenticated attacker to execute arbitrary OS commands.
Source: PSIRT@sonicwall.com
NVD status: Analyzed

Risk scores

CVSS 3.1

Type: Primary
Base score: 9.8
Impact score: 5.9
Exploitability score: 3.9
Vector string: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Severity: CRITICAL

Known exploits

Data from CISA

Vulnerability name: SonicWall SMA1000 Appliances Deserialization Vulnerability
Exploit added on: Jan 24, 2025
Exploit action due: Feb 14, 2025
Required action: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.

Weaknesses

PSIRT@sonicwall.com: CWE-502

Hype score is a measure of social media activity compared against trending CVEs from the past 12 months. Max score 100.

Hype score: 1

Configurations

[
  {
    "nodes": [
      {
        "negate": false,
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:a:sonicwall:sma8200v:*:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "5F558E7D-E784-406B-B290-3A969DE5DB93",
            "versionEndExcluding": "12.4.3-02854"
          }
        ],
        "operator": "OR"
      }
    ]
  },
  {
    "nodes": [
      {
        "negate": false,
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:o:sonicwall:sma6200_firmware:*:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "7B32A454-15AF-4D1F-9B2E-47FA49C54944",
            "versionEndExcluding": "12.4.3-02854"
          }
        ],
        "operator": "OR"
      },
      {
        "negate": false,
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:h:sonicwall:sma6200:-:*:*:*:*:*:*:*",
            "vulnerable": false,
            "matchCriteriaId": "57B3C90F-F633-41B9-855E-902F6DC8ACA5"
          }
        ],
        "operator": "OR"
      }
    ],
    "operator": "AND"
  },
  {
    "nodes": [
      {
        "negate": false,
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:o:sonicwall:sma6210_firmware:*:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "03BAE67D-9500-48C3-9A57-4ACDC78ED2AF",
            "versionEndExcluding": "12.4.3-02854"
          }
        ],
        "operator": "OR"
      },
      {
        "negate": false,
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:h:sonicwall:sma6210:-:*:*:*:*:*:*:*",
            "vulnerable": false,
            "matchCriteriaId": "7B24D300-1154-49A1-A1F3-FB0CC717166A"
          }
        ],
        "operator": "OR"
      }
    ],
    "operator": "AND"
  },
  {
    "nodes": [
      {
        "negate": false,
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:o:sonicwall:sma7200_firmware:*:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "5EB0E0F9-14CC-4B29-8026-6A4D3E73B46A",
            "versionEndExcluding": "12.4.3-02854"
          }
        ],
        "operator": "OR"
      },
      {
        "negate": false,
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:h:sonicwall:sma7200:-:*:*:*:*:*:*:*",
            "vulnerable": false,
            "matchCriteriaId": "4F7B4ED9-7A57-48DC-AAEC-A2C2EAFF3B64"
          }
        ],
        "operator": "OR"
      }
    ],
    "operator": "AND"
  },
  {
    "nodes": [
      {
        "negate": false,
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:o:sonicwall:sma7210_firmware:*:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "6C94E32E-8FE8-43C4-B86B-CC7DBD0A9973",
            "versionEndExcluding": "12.4.3-02854"
          }
        ],
        "operator": "OR"
      },
      {
        "negate": false,
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:h:sonicwall:sma7210:-:*:*:*:*:*:*:*",
            "vulnerable": false,
            "matchCriteriaId": "E9B414C5-C376-4216-A267-ABC0930905CE"
          }
        ],
        "operator": "OR"
      }
    ],
    "operator": "AND"
  },
  {
    "nodes": [
      {
        "negate": false,
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:o:sonicwall:sra_ex6000_firmware:*:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "C1E84DDC-2CDB-447D-8403-C93FE16098C5",
            "versionEndIncluding": "12.4.3-02804"
          }
        ],
        "operator": "OR"
      },
      {
        "negate": false,
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:h:sonicwall:sra_ex6000:-:*:*:*:*:*:*:*",
            "vulnerable": false,
            "matchCriteriaId": "8115B7AF-C785-4F68-9728-A19536EB363F"
          }
        ],
        "operator": "OR"
      }
    ],
    "operator": "AND"
  },
  {
    "nodes": [
      {
        "negate": false,
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:o:sonicwall:sra_ex7000_firmware:*:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "2F33335D-F5C2-4F1C-819D-452381DC5656",
            "versionEndIncluding": "12.4.3-02804"
          }
        ],
        "operator": "OR"
      },
      {
        "negate": false,
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:h:sonicwall:sra_ex7000:-:*:*:*:*:*:*:*",
            "vulnerable": false,
            "matchCriteriaId": "13952D02-29BB-465C-8A5C-6B25CB1BAECD"
          }
        ],
        "operator": "OR"
      }
    ],
    "operator": "AND"
  },
  {
    "nodes": [
      {
        "negate": false,
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:o:sonicwall:sra_ex9000_firmware:*:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "5C85D8D6-5330-4B9D-A870-5A43E49CEDB2",
            "versionEndIncluding": "12.4.3-02804"
          }
        ],
        "operator": "OR"
      },
      {
        "negate": false,
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:h:sonicwall:sra_ex9000:-:*:*:*:*:*:*:*",
            "vulnerable": false,
            "matchCriteriaId": "FDFDE82F-600E-48C7-AB15-ADDDFFBFC114"
          }
        ],
        "operator": "OR"
      }
    ],
    "operator": "AND"
  }
]

Overview

Risk scores

CVSS 3.1

Known exploits

Weaknesses

Social media

Configurations

References