CVE-2025-40602 — SonicWall SMA1000 Missing Authorization Vulnerability
CVE-2025-40602: SonicWall SMA1000 Missing Authorization Vulnerability
CISA Known Exploited Vulnerability (KEV)
| Vendor / project | SonicWall |
| Product | SMA1000 appliance |
| Date added | 2025-12-17 |
| Due date | 2025-12-24 |
| Ransomware campaign use | Unknown |
Description
SonicWall SMA1000 contains a missing authorization vulnerability that could allow for privilege escalation appliance management console (AMC) of affected devices.
Required action (CISA)
Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable
Notes
Check for signs of potential compromise on all internet accessible SonicWall SMA1000 instances after applying mitigations. For more information please see: https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2025-0019 ; https://nvd.nist.gov/vuln/detail/CVE-2025-40602
References
- NVD: https://nvd.nist.gov/vuln/detail/CVE-2025-40602
- KEV catalog: https://www.cisa.gov/known-exploited-vulnerabilities-catalog