Description:
SonicWall released a security advisory to address a vulnerability in SMA1000 series products. An attacker could exploit the vulnerability by sending specially crafted requests to an affected system.
Reports indicated that the remote code execution vulnerability (CVE-2025-23006) in SonicWall SMA1000 series products is being exploited in the wild. System administrators are advised to take immediate action to patch your affected systems to mitigate the elevated risk of cyber attacks.
Affected Systems:
- SonicWall SMA1000 series prior to version 12.4.3-02854 (platform-hotfix)
For detailed information of the affected systems, please refer to the corresponding security advisory at vendor's website.
Impact:
Successful exploitation of the vulnerability could lead to remote code execution on the affected system.
Recommendation:
Patches for affected systems are now available. Administrators of affected systems should follow the recommendations provided by the vendor and take immediate actions to mitigate the risk.
More Information:
- https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2025-0002
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-23006
