All vulnerabilities
CVE-2025-40602

SonicWall SMA1000 Missing Authorization Vulnerability

SonicWall SMA1000 applianceNetwork & edge
Open in ThreatlineRecord JSON
CVSS
6.6Medium
ExploitationExploited in the wildAdded to KEV 17 Dec 2025CISA KEV
Exploit odds (EPSS)2.76%Chance of exploitation activity in the next 30 days, higher than 86% of CVEs. Scored 23 Oct 2026FIRST EPSS
Fixed inNone listedNo source names a fixed version. Check the vendor advisory below
Federal deadline24 Dec 2025Remediation due date for US federal agenciesCISA KEV
CISA required actionApply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable CISA KEV

What fixes it

No source in this snapshot names a fixed version. The vendor advisories under References are the place to check.

Timeline

  1. 17 Dec 2025Added to CISA KEVCISA KEV
  2. 18 Dec 2025, 10:58 UTCPublishedCVE List

Description

SonicWall SMA1000 contains a missing authorization vulnerability that could allow for privilege escalation appliance management console (AMC) of affected devices.

Text from CVE List

Affected versions 2

  • SMA1000affected: 12.4.3-03093 (platform-hotfix) and earlier versionsCVE List
  • SMA1000affected: 12.5.0-02002 (platform-hotfix) and earlier versionsCVE List

References 3