Exploited Vulnerabilities Daily
🌐 English

Home › SonicWall

CVE-2025-23006: SonicWall SMA1000 Appliances

EPSS23.4%No. 1082 of 1739 in KEV
CVE year2025listed the same year
Same vendor in KEV19
Same product5
FieldValue
VendorSonicWall
ProductSMA1000 Appliances
NameSonicWall SMA1000 Appliances Deserialization Vulnerability
Added to KEV2025-01-24
US federal due date2025-02-14
Ransomware useKnown
CWECWE-502

CISA description

SonicWall SMA1000 Appliance Management Console (AMC) and Central Management Console (CMC) contain a deserialization of untrusted data vulnerability, which can enable a remote, unauthenticated attacker to execute arbitrary OS commands.

Other entries for this product

CVEVendor / productAddedEPSSRansomware
CVE-2026-83549SonicWall SMA1000 Appliances2026-09-0210.7%Unknown
CVE-2026-83548SonicWall SMA1000 Appliances2026-09-028.7%Unknown
CVE-2026-15410SonicWall SMA1000 Appliances2026-07-1411.7%Known
CVE-2026-15409SonicWall SMA1000 Appliances2026-07-146.7%Known

NVD — CVE-2025-23006

Data from CISA's Known Exploited Vulnerabilities (KEV) catalog. EPSS is FIRST's estimated probability of exploitation activity in the next 30 days, refreshed weekly. Always follow the vendor's official guidance.
About this page

A SonicWall SMA1000 Appliances vulnerability added to CISA's Known Exploited Vulnerabilities catalog on 2025-01-24.