CVE-2025-23006

No fix known ExploitedEPSS 23%CVSS 9.8

Pre-authentication deserialization of untrusted data vulnerability has been identified in the SMA1000 Appliance Management Console (AMC) and Central Management Console (CMC), which in specific conditions could potentially enable a remote unauthenticated attacker to execute arbitrary OS commands.

Published 2025-01-23 · In CISA KEV since 2025-01-24 · CVE record · OSV

Products: SonicWall SMA1000