Back to CVE records
Medium 6.6Known exploited (CISA KEV)Published Dec 18, 2025
CVE-2025-40602A local privilege escalation vulnerability due to insufficient authorization in the SonicWall SMA1000 appliance management console (AMC).
Updated under an hour ago ()
Does this affect you?
It affects SonicWall SMA1000 and 5 other products. Add what you run to find out whether that includes you.
CISA lists it as known exploited since Dec 17, 2025; federal agencies had to remediate by Dec 24, 2025. Treat that date as your deadline.
Do this next
Start free and add your stack
Free account, 1 product
A local privilege escalation vulnerability due to insufficient authorization in the SonicWall SMA1000 appliance management console (AMC).
- CVSS
- 6.6 MEDIUM (v3.1, CISA ADP)CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H
- Weakness (CWE)
- CWE-862, CWE-250
- Known exploited
- Added to CISA KEV Dec 17, 2025; federal remediation due Dec 24, 2025Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable
- EPSS (exploitation in the next 30 days)
- 2.76% (percentile 86)
- Assigned by
- sonicwall
- NVD analysis
- Analyzed
- Record last updated
- Dec 18, 2025
- First seen by InfoSec Signals
- Oct 9, 2026
Affected products
SonicWall SMA1000 sonicwall:sma1000 (from the name) | 12.4.3-03093 (platform-hotfix) and earlier versions; 12.5.0-02002 (platform-hotfix) and earlier versions | CNA record |
sonicwall sma6200_firmware sonicwall:sma6200_firmware | before 12.4.3-03245; from 12.5.0 before 12.5.0-02283 | NVD |
sonicwall sma6210_firmware sonicwall:sma6210_firmware | before 12.4.3-03245; from 12.5.0 before 12.5.0-02283 | NVD |
sonicwall sma7200_firmware sonicwall:sma7200_firmware | before 12.4.3-03245; from 12.5.0 before 12.5.0-02283 | NVD |
sonicwall sma7210_firmware sonicwall:sma7210_firmware | before 12.4.3-03245; from 12.5.0 before 12.5.0-02283 | NVD |
sonicwall sma8200v sonicwall:sma8200v | before 12.4.3-03245; from 12.5.0 before 12.5.0-02283 | NVD |
References
- https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2025-0019vendor-advisory
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2025-40602us-government-resource
The CVE record on cve.org NVD's entry
The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.