BlogPHP2Shell Exploitation: How Secure.com Can Protect YouRead more
← CVE Radar

CVE-2025-40602SonicWall SMA1000 Missing Authorization Vulnerability

A local privilege escalation vulnerability due to insufficient authorization in the SonicWall SMA1000 appliance management console (AMC).

6.6 MEDIUMEPSS 2.75%⚡ Known Exploited (CISA KEV)NVD: Analyzed

OverviewAffected ProductsReferences
NVD CVE.org

Overview

Severity

ScoreSeverityVersionVector String
6.6MEDIUM3.1CISA-ADPCVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H

CISA required action

⚡ Known exploited · remediation due Dec 24, 2025

Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable

Details

CVE ID
CVE-2025-40602
Status
Analyzed
Assigner (CNA)
sonicwall
Published
Dec 18, 2025
Last modified
2026-06-17 09:21 UTC
Weaknesses
  • CWE-862 · Missing Authorization
  • CWE-250 · Execution with Unnecessary Privileges

Sources

Refreshed hourly from the sources above. Last fetched 2026-11-08 10:32 UTC.