CVE-2025-23006
| CVE Published | 2025-01-23 |
|---|---|
| Related CWE(s) | CWE-502: Deserialization of Untrusted Data |
| Related Vendor(s) | sonicwall |
| Related Product(s) | sma6210_firmware, sra_ex9000_firmware, sma6200_firmware, sma8200v, sma7210_firmware, sra_ex7000_firmware, sra_ex6000_firmware, sma7200_firmware |
| Exploitation Reported (CISA KEV) | 2025-01-24 |
| CVSS 3 Base Score | 9.8 (CRITICAL) |
| CVSS 3 Attack Complexity | LOW |
| CVSS 3 Attack Vector | NETWORK |
Pre-authentication deserialization of untrusted data vulnerability has been identified in the SMA1000 Appliance Management Console (AMC) and Central Management Console (CMC), which in specific conditions could potentially enable a remote unauthenticated attacker to execute arbitrary OS commands.
Cyber Threat Graph Context
Explore how this CVE relates to the wider threat graph