RaqibCTI
CVE

CVE-2025-23006

P1⬤ KNOWN RANSOMWARE USE
SonicWall SMA1000 Appliances Deserialization Vulnerability
SonicWall · SMA1000 Appliances
Date added (CISA)
2025-01-24
Remediation due
2025-02-14
Known ransomware use
Yes
Remediation priority
P1known ransomware use · past CISA due date

Description

SonicWall SMA1000 Appliance Management Console (AMC) and Central Management Console (CMC) contain a deserialization of untrusted data vulnerability, which can enable a remote, unauthenticated attacker to execute arbitrary OS commands.

Source: NVD ↗ · CISA KEV Catalog ↗