CVE-2025-40602

Published Dec 18, 2025

Last updated 3 months ago

Exploit known CVSS medium 6.6

SonicWall SMA1000

Sonicwall

Overview

Description: A local privilege escalation vulnerability due to insufficient authorization in the SonicWall SMA1000 appliance management console (AMC).
Source: PSIRT@sonicwall.com
NVD status: Analyzed
Products: sma6200_firmware, sma6210_firmware, sma7200_firmware, sma7210_firmware, sma8200v

Risk scores

CVSS 3.1

Type: Secondary
Base score: 6.6
Impact score: 5.9
Exploitability score: 0.7
Vector string: CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H
Severity: MEDIUM

Known exploits

Data from CISA

Vulnerability name: SonicWall SMA1000 Missing Authorization Vulnerability
Exploit added on: Dec 17, 2025
Exploit action due: Dec 24, 2025
Required action: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable

Weaknesses

PSIRT@sonicwall.com: CWE-250

Hype score: Not currently trending

Configurations

[
  {
    "nodes": [
      {
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:o:sonicwall:sma6200_firmware:*:*:*:*:*:*:*:*",
            "matchCriteriaId": "FA502098-85D4-4263-A972-5C257A27E566",
            "versionEndExcluding": "12.4.3-03245",
            "vulnerable": true
          },
          {
            "criteria": "cpe:2.3:o:sonicwall:sma6200_firmware:*:*:*:*:*:*:*:*",
            "matchCriteriaId": "A8117AD1-538B-4D74-B7BD-CDDFDF1CA5D6",
            "versionEndExcluding": "12.5.0-02283",
            "versionStartIncluding": "12.5.0",
            "vulnerable": true
          }
        ],
        "negate": false,
        "operator": "OR"
      },
      {
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:h:sonicwall:sma6200:-:*:*:*:*:*:*:*",
            "matchCriteriaId": "57B3C90F-F633-41B9-855E-902F6DC8ACA5",
            "vulnerable": false
          }
        ],
        "negate": false,
        "operator": "OR"
      }
    ],
    "operator": "AND"
  },
  {
    "nodes": [
      {
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:o:sonicwall:sma6210_firmware:*:*:*:*:*:*:*:*",
            "matchCriteriaId": "11F3325C-B52F-4569-A900-87A3062BA955",
            "versionEndExcluding": "12.4.3-03245",
            "vulnerable": true
          },
          {
            "criteria": "cpe:2.3:o:sonicwall:sma6210_firmware:*:*:*:*:*:*:*:*",
            "matchCriteriaId": "83F28647-1EB1-4BD4-806E-ECFA82C7F81F",
            "versionEndExcluding": "12.5.0-02283",
            "versionStartIncluding": "12.5.0",
            "vulnerable": true
          }
        ],
        "negate": false,
        "operator": "OR"
      },
      {
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:h:sonicwall:sma6210:-:*:*:*:*:*:*:*",
            "matchCriteriaId": "7B24D300-1154-49A1-A1F3-FB0CC717166A",
            "vulnerable": false
          }
        ],
        "negate": false,
        "operator": "OR"
      }
    ],
    "operator": "AND"
  },
  {
    "nodes": [
      {
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:o:sonicwall:sma7200_firmware:*:*:*:*:*:*:*:*",
            "matchCriteriaId": "634F6A69-541B-4C08-80CC-D75BCA1AFA0C",
            "versionEndExcluding": "12.4.3-03245",
            "vulnerable": true
          },
          {
            "criteria": "cpe:2.3:o:sonicwall:sma7200_firmware:*:*:*:*:*:*:*:*",
            "matchCriteriaId": "557266E9-9045-4686-B260-ADCCE884E47B",
            "versionEndExcluding": "12.5.0-02283",
            "versionStartIncluding": "12.5.0",
            "vulnerable": true
          }
        ],
        "negate": false,
        "operator": "OR"
      },
      {
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:h:sonicwall:sma7200:-:*:*:*:*:*:*:*",
            "matchCriteriaId": "4F7B4ED9-7A57-48DC-AAEC-A2C2EAFF3B64",
            "vulnerable": false
          }
        ],
        "negate": false,
        "operator": "OR"
      }
    ],
    "operator": "AND"
  },
  {
    "nodes": [
      {
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:o:sonicwall:sma7210_firmware:*:*:*:*:*:*:*:*",
            "matchCriteriaId": "A4BD7021-91E8-4E68-AC7B-6C971E6C6F77",
            "versionEndExcluding": "12.4.3-03245",
            "vulnerable": true
          },
          {
            "criteria": "cpe:2.3:o:sonicwall:sma7210_firmware:*:*:*:*:*:*:*:*",
            "matchCriteriaId": "3FBEAD8B-7C9F-445C-BDC4-E2D19291D155",
            "versionEndExcluding": "12.5.0-02283",
            "versionStartIncluding": "12.5.0",
            "vulnerable": true
          }
        ],
        "negate": false,
        "operator": "OR"
      },
      {
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:h:sonicwall:sma7210:-:*:*:*:*:*:*:*",
            "matchCriteriaId": "E9B414C5-C376-4216-A267-ABC0930905CE",
            "vulnerable": false
          }
        ],
        "negate": false,
        "operator": "OR"
      }
    ],
    "operator": "AND"
  },
  {
    "nodes": [
      {
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:a:sonicwall:sma8200v:*:*:*:*:*:*:*:*",
            "matchCriteriaId": "A68FFD03-F144-4F74-A7FC-700AC5CA789D",
            "versionEndExcluding": "12.4.3-03245",
            "vulnerable": true
          },
          {
            "criteria": "cpe:2.3:a:sonicwall:sma8200v:*:*:*:*:*:*:*:*",
            "matchCriteriaId": "42CE52E0-1CD5-4CA2-85CB-D5BDB2FE63D8",
            "versionEndExcluding": "12.5.0-02283",
            "versionStartIncluding": "12.5.0",
            "vulnerable": true
          }
        ],
        "negate": false,
        "operator": "OR"
      }
    ]
  }
]

References

Sources include official advisories and independent security research.

Overview

Risk scores

CVSS 3.1

Known exploits

Weaknesses

Social media

Configurations

Related CVEs

References