SonicWall · SMA1000 appliance
CVE-2025-40602
SonicWall SMA1000 Missing Authorization Vulnerability
What it is
A local privilege escalation vulnerability due to insufficient authorization in the SonicWall SMA1000 appliance management console (AMC).
CISA: SonicWall SMA1000 contains a missing authorization vulnerability that could allow for privilege escalation appliance management console (AMC) of affected devices.
What to do
Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable
Deadline for US federal agencies: December 24, 2025
More exploited flaws from SonicWall
| Added | Vulnerability | Product | Severity | Attack chance |
|---|---|---|---|---|
| Sep 2, 2026 | Server-Side Request Forgery | SMA1000 Appliances | Critical 10.0 | 8.0% |
| Sep 2, 2026 | OS Command Injection | SMA1000 Appliances | High 7.8 | 9.9% |
| Jul 14, 2026 | Server-Side Request Forgery | SMA1000 Appliances | Critical 10.0 | 6.8% |
| Jul 14, 2026 | Code Injection | SMA1000 Appliances | High 7.2 | 12% |
| May 1, 2025 | OS Command Injection | SMA100 Appliances | High 7.2 | 76% |
| Apr 16, 2025 | OS Command Injection | SMA100 Appliances | Medium 6.5 | 4.4% |
| Feb 18, 2025 | SSLVPN Improper Authentication | SonicOS | High 8.2 | 95% |
| Jan 24, 2025 | Deserialization | SMA1000 Appliances | Critical 9.8 | 23% |
Sources: Known Exploited Vulnerabilities (CISA, public domain), CVE records (cve.org) and EPSS (FIRST). The chance of attacks is the EPSS estimate that someone will try to exploit the flaw in the next 30 days.