CVE-2025-40602

Producto

SonicWall / SMA1000 appliance

Vulnerabilidad

SonicWall SMA1000 Missing Authorization Vulnerability

Añadido a KEV

17 dic 2025

Remediar antes de

24 dic 2025

Uso conocido en ransomware

No

Descripción resumida

SonicWall SMA1000 contains a missing authorization vulnerability that could allow for privilege escalation appliance management console (AMC) of affected devices.

Acción requerida

Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable

Notas

Check for signs of potential compromise on all internet accessible SonicWall SMA1000 instances after applying mitigations. For more information please see: https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2025-0019 ; https://nvd.nist.gov/vuln/detail/CVE-2025-40602