CVE-2025-23006 | Teknoloji dünyasından en güncel haberleri ve güvenlikle ilgili gelişmeleri takip edin.

Pre-authentication deserialization of untrusted data vulnerability has been identified in the SMA1000 Appliance Management Console (AMC) and Central Management…
Critical KEV CVSS: 9.8

CVE-2025-23006

Pre-authentication deserialization of untrusted data vulnerability has been identified in the SMA1000 Appliance Management Console (AMC) and Central Management Console (CMC), which in specific conditions could potentially enable a remote unauthenticated attacker to execute arbitrary OS commands.
Vendor
Sonicwall
Product
Sma8200v
CWE
CWE-502
Yayın Tarihi
2025-01-23 12:15:28
Güncelleme
2025-10-31 15:56:18
Source Identifier
PSIRT@sonicwall.com
KEV Date Added
2025-01-24

Kategoriler

CWE-502 Sma8200v CRITICAL Sonicwall 2025

Referanslar

https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2025-0002 https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2025-23006