fkie_cve-2025-23006
Vulnerability from fkie_nvd
Published
2025-01-23 12:15
Modified
2025-03-18 18:15
Severity ?
9.8 (Critical) - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
9.8 (Critical) - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Summary
Pre-authentication deserialization of untrusted data vulnerability has been identified in the SMA1000 Appliance Management Console (AMC) and Central Management Console (CMC), which in specific conditions could potentially enable a remote unauthenticated attacker to execute arbitrary OS commands.
References
PSIRT@sonicwall.comhttps://psirt.global.sonicwall.com/vuln-detail/SNWLID-2025-0002Vendor Advisory
Impacted products
Vendor Product Version
sonicwall sma8200v *
sonicwall sma6200_firmware *
sonicwall sma6200 -
sonicwall sma6210_firmware *
sonicwall sma6210 -
sonicwall sma7200_firmware *
sonicwall sma7200 -
sonicwall sma7210_firmware *
sonicwall sma7210 -
sonicwall sra_ex6000_firmware *
sonicwall sra_ex6000 -
sonicwall sra_ex7000_firmware *
sonicwall sra_ex7000 -
sonicwall sra_ex9000_firmware *
sonicwall sra_ex9000 -


To clipboard 

{
  "cisaActionDue": "2025-02-14",
  "cisaExploitAdd": "2025-01-24",
  "cisaRequiredAction": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.",
  "cisaVulnerabilityName": "SonicWall SMA1000 Appliances Deserialization Vulnerability",
  "configurations": [
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:sonicwall:sma8200v:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "5F558E7D-E784-406B-B290-3A969DE5DB93",
              "versionEndExcluding": "12.4.3-02854",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ]
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:sonicwall:sma6200_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "7B32A454-15AF-4D1F-9B2E-47FA49C54944",
              "versionEndExcluding": "12.4.3-02854",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:sonicwall:sma6200:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "57B3C90F-F633-41B9-855E-902F6DC8ACA5",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:sonicwall:sma6210_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "03BAE67D-9500-48C3-9A57-4ACDC78ED2AF",
              "versionEndExcluding": "12.4.3-02854",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:sonicwall:sma6210:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "7B24D300-1154-49A1-A1F3-FB0CC717166A",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:sonicwall:sma7200_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "5EB0E0F9-14CC-4B29-8026-6A4D3E73B46A",
              "versionEndExcluding": "12.4.3-02854",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:sonicwall:sma7200:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "4F7B4ED9-7A57-48DC-AAEC-A2C2EAFF3B64",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:sonicwall:sma7210_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "6C94E32E-8FE8-43C4-B86B-CC7DBD0A9973",
              "versionEndExcluding": "12.4.3-02854",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:sonicwall:sma7210:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "E9B414C5-C376-4216-A267-ABC0930905CE",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:sonicwall:sra_ex6000_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "C1E84DDC-2CDB-447D-8403-C93FE16098C5",
              "versionEndIncluding": "12.4.3-02804",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:sonicwall:sra_ex6000:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "8115B7AF-C785-4F68-9728-A19536EB363F",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:sonicwall:sra_ex7000_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "2F33335D-F5C2-4F1C-819D-452381DC5656",
              "versionEndIncluding": "12.4.3-02804",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:sonicwall:sra_ex7000:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "13952D02-29BB-465C-8A5C-6B25CB1BAECD",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:sonicwall:sra_ex9000_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "5C85D8D6-5330-4B9D-A870-5A43E49CEDB2",
              "versionEndIncluding": "12.4.3-02804",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:sonicwall:sra_ex9000:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "FDFDE82F-600E-48C7-AB15-ADDDFFBFC114",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    }
  ],
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "Pre-authentication deserialization of untrusted data vulnerability has been identified in the SMA1000 Appliance Management Console (AMC) and Central Management Console (CMC), which in specific conditions could potentially enable a remote unauthenticated attacker to execute arbitrary OS commands."
    },
    {
      "lang": "es",
      "value": "Se ha identificado una vulnerabilidad de deserializaci\u00f3n de datos no confiables antes de la autenticaci\u00f3n en SMA1000 Appliance Management Console (AMC) y Central Management Console (CMC), que en condiciones espec\u00edficas podr\u00eda permitir que un atacante remoto no autenticado ejecute comandos arbitrarios del sistema operativo."
    }
  ],
  "id": "CVE-2025-23006",
  "lastModified": "2025-03-18T18:15:28.613",
  "metrics": {
    "cvssMetricV31": [
      {
        "cvssData": {
          "attackComplexity": "LOW",
          "attackVector": "NETWORK",
          "availabilityImpact": "HIGH",
          "baseScore": 9.8,
          "baseSeverity": "CRITICAL",
          "confidentialityImpact": "HIGH",
          "integrityImpact": "HIGH",
          "privilegesRequired": "NONE",
          "scope": "UNCHANGED",
          "userInteraction": "NONE",
          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
          "version": "3.1"
        },
        "exploitabilityScore": 3.9,
        "impactScore": 5.9,
        "source": "nvd@nist.gov",
        "type": "Primary"
      },
      {
        "cvssData": {
          "attackComplexity": "LOW",
          "attackVector": "NETWORK",
          "availabilityImpact": "HIGH",
          "baseScore": 9.8,
          "baseSeverity": "CRITICAL",
          "confidentialityImpact": "HIGH",
          "integrityImpact": "HIGH",
          "privilegesRequired": "NONE",
          "scope": "UNCHANGED",
          "userInteraction": "NONE",
          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
          "version": "3.1"
        },
        "exploitabilityScore": 3.9,
        "impactScore": 5.9,
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type": "Secondary"
      }
    ]
  },
  "published": "2025-01-23T12:15:28.523",
  "references": [
    {
      "source": "PSIRT@sonicwall.com",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2025-0002"
    }
  ],
  "sourceIdentifier": "PSIRT@sonicwall.com",
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "description": [
        {
          "lang": "en",
          "value": "CWE-502"
        }
      ],
      "source": "PSIRT@sonicwall.com",
      "type": "Secondary"
    }
  ]
}


Log in or create an account to share your comment.




Tags
Taxonomy of the tags.




Sightings

Author Source Type Date

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
  • Confirmed: The vulnerability is confirmed from an analyst perspective.
  • Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
  • Patched: This vulnerability was successfully patched by the user reporting the sighting.
  • Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
  • Not confirmed: The user expresses doubt about the veracity of the vulnerability.
  • Not patched: This vulnerability was not successfully patched by the user reporting the sighting.