CVE-2025-23006: Pre-authentication deserialization of untrusted data vulnerability has been identified in the SMA1000 Appliance Management Console (AMC) and...
9.8
CVSS
Description
Pre-authentication deserialization of untrusted data vulnerability has been identified in the SMA1000 Appliance Management Console (AMC) and Central Management Console (CMC), which in specific conditions could potentially enable a remote unauthenticated attacker to execute arbitrary OS commands.
Known Exploited
🚨 Marked as known exploited on January 24th, 2025 (3 months ago).
Classification
CVE ID: CVE-2025-23006
CVSS Base Severity: CRITICAL
CVSS Base Score: 9.8
CVSS Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Affected Products
Vendor: SonicWall
Product: SMA1000
Exploit Prediction Scoring System (EPSS)
EPSS Score: 1.37% (probability of being exploited)
EPSS Percentile: 86.26% (scored less or equal to compared to others)
EPSS Date: 2025-02-21 (when was this score calculated)