CVE-2025-23006
Pre-authentication deserialization of untrusted data vulnerability has been identified in the SMA1000 Appliance Management Console (AMC) and Central Management Console (CMC), which in specific conditions could potentially enable a remote unauthenticated attacker to execute arbitrary OS commands.
| Software | From | Fixed in |
|---|---|---|
| sonicwall / sma8200v | - | 12.4.3-02854 |
| sonicwall / sma6200_firmware | - | 12.4.3-02854 |
| sonicwall / sma6210_firmware | - | 12.4.3-02854 |
| sonicwall / sma7200_firmware | - | 12.4.3-02854 |
| sonicwall / sma7210_firmware | - | 12.4.3-02854 |
| sonicwall / sra_ex6000_firmware | - | 12.4.3-02804.x |
| sonicwall / sra_ex7000_firmware | - | 12.4.3-02804.x |
| sonicwall / sra_ex9000_firmware | - | 12.4.3-02804.x |
Deep Security Visibility Without the Complexity
SynScan provides clear, real-time security insights so you can monitor your attack surface, spot risks early, and act fast—without extra complexity.
- No setup fees
- 5-min deployment
- Cancel anytime