CVE-2025-40602

Published Dec 18, 2025

Last updated 10 days ago

SonicWall SMA1000

Overview

AI description

Automated description summarized from trusted sources.

CVE-2025-40602 is a local privilege escalation vulnerability affecting the Appliance Management Console (AMC) of SonicWall SMA 100 series appliances. The vulnerability stems from insufficient authorization checks, which could allow an attacker with local access to gain elevated privileges. SonicWall has released patches to address this vulnerability and is urging users to apply the updates immediately. This vulnerability has been exploited in the wild in conjunction with CVE-2025-23006, a previously patched remote code execution flaw, to achieve unauthenticated remote code execution with root privileges. It was reported by Clément Lecigne and Zander Work of Google Threat Intelligence Group. CISA has added CVE-2025-40602 to its Known Exploited Vulnerabilities catalog, requiring Federal Civilian Executive Branch agencies to apply fixes by December 24, 2025.

Description: A local privilege escalation vulnerability due to insufficient authorization in the SonicWall SMA1000 appliance management console (AMC).
Source: PSIRT@sonicwall.com
NVD status: Analyzed
Products: sma6200_firmware, sma6210_firmware, sma7200_firmware, sma7210_firmware, sma8200v

Risk scores

CVSS 3.1

Type: Secondary
Base score: 6.6
Impact score: 5.9
Exploitability score: 0.7
Vector string: CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H
Severity: MEDIUM

Known exploits

Data from CISA

Vulnerability name: SonicWall SMA1000 Missing Authorization Vulnerability
Exploit added on: Dec 17, 2025
Exploit action due: Dec 24, 2025
Required action: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable

Weaknesses

PSIRT@sonicwall.com: CWE-250

Hype score: Not currently trending

Configurations

[
  {
    "nodes": [
      {
        "negate": false,
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:o:sonicwall:sma6200_firmware:*:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "FA502098-85D4-4263-A972-5C257A27E566",
            "versionEndExcluding": "12.4.3-03245"
          },
          {
            "criteria": "cpe:2.3:o:sonicwall:sma6200_firmware:*:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "A8117AD1-538B-4D74-B7BD-CDDFDF1CA5D6",
            "versionEndExcluding": "12.5.0-02283",
            "versionStartIncluding": "12.5.0"
          }
        ],
        "operator": "OR"
      },
      {
        "negate": false,
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:h:sonicwall:sma6200:-:*:*:*:*:*:*:*",
            "vulnerable": false,
            "matchCriteriaId": "57B3C90F-F633-41B9-855E-902F6DC8ACA5"
          }
        ],
        "operator": "OR"
      }
    ],
    "operator": "AND"
  },
  {
    "nodes": [
      {
        "negate": false,
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:o:sonicwall:sma6210_firmware:*:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "11F3325C-B52F-4569-A900-87A3062BA955",
            "versionEndExcluding": "12.4.3-03245"
          },
          {
            "criteria": "cpe:2.3:o:sonicwall:sma6210_firmware:*:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "83F28647-1EB1-4BD4-806E-ECFA82C7F81F",
            "versionEndExcluding": "12.5.0-02283",
            "versionStartIncluding": "12.5.0"
          }
        ],
        "operator": "OR"
      },
      {
        "negate": false,
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:h:sonicwall:sma6210:-:*:*:*:*:*:*:*",
            "vulnerable": false,
            "matchCriteriaId": "7B24D300-1154-49A1-A1F3-FB0CC717166A"
          }
        ],
        "operator": "OR"
      }
    ],
    "operator": "AND"
  },
  {
    "nodes": [
      {
        "negate": false,
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:o:sonicwall:sma7200_firmware:*:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "634F6A69-541B-4C08-80CC-D75BCA1AFA0C",
            "versionEndExcluding": "12.4.3-03245"
          },
          {
            "criteria": "cpe:2.3:o:sonicwall:sma7200_firmware:*:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "557266E9-9045-4686-B260-ADCCE884E47B",
            "versionEndExcluding": "12.5.0-02283",
            "versionStartIncluding": "12.5.0"
          }
        ],
        "operator": "OR"
      },
      {
        "negate": false,
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:h:sonicwall:sma7200:-:*:*:*:*:*:*:*",
            "vulnerable": false,
            "matchCriteriaId": "4F7B4ED9-7A57-48DC-AAEC-A2C2EAFF3B64"
          }
        ],
        "operator": "OR"
      }
    ],
    "operator": "AND"
  },
  {
    "nodes": [
      {
        "negate": false,
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:o:sonicwall:sma7210_firmware:*:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "A4BD7021-91E8-4E68-AC7B-6C971E6C6F77",
            "versionEndExcluding": "12.4.3-03245"
          },
          {
            "criteria": "cpe:2.3:o:sonicwall:sma7210_firmware:*:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "3FBEAD8B-7C9F-445C-BDC4-E2D19291D155",
            "versionEndExcluding": "12.5.0-02283",
            "versionStartIncluding": "12.5.0"
          }
        ],
        "operator": "OR"
      },
      {
        "negate": false,
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:h:sonicwall:sma7210:-:*:*:*:*:*:*:*",
            "vulnerable": false,
            "matchCriteriaId": "E9B414C5-C376-4216-A267-ABC0930905CE"
          }
        ],
        "operator": "OR"
      }
    ],
    "operator": "AND"
  },
  {
    "nodes": [
      {
        "negate": false,
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:a:sonicwall:sma8200v:*:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "A68FFD03-F144-4F74-A7FC-700AC5CA789D",
            "versionEndExcluding": "12.4.3-03245"
          },
          {
            "criteria": "cpe:2.3:a:sonicwall:sma8200v:*:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "42CE52E0-1CD5-4CA2-85CB-D5BDB2FE63D8",
            "versionEndExcluding": "12.5.0-02283",
            "versionStartIncluding": "12.5.0"
          }
        ],
        "operator": "OR"
      }
    ]
  }
]

References

Sources include official advisories and independent security research.