Skip to main content
Apexward Pulse

SonicWall

SonicWall SMA1000 Missing Authorization Vulnerability

CVE-2025-40602

What this means

This is rated medium severity (6.6 out of 10). It is on the known-exploited catalogue, which means attacks using it have already been seen. Ask IT whether Sonicwall sma6200 Firmware, Sonicwall sma6200 and Sonicwall sma6210 Firmware, and 6 more are in your estate.

Full vendor description

A local privilege escalation vulnerability due to insufficient authorization in the SonicWall SMA1000 appliance management console (AMC).

Scoring and exploitation

6.6/ 10
CVSS 3.1 base scoreMedium

Exploitable over the network with an administrator-level account, under specific conditions, and no one has to click or open anything. High impact on confidentiality, integrity and availability.

CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H

Exploitability

Longer bar: easier to attack

Attack vectorNetworkAV:N
Attack complexityHighAC:H
Privileges requiredHighPR:H
User interactionNoneUI:N
ScopeUnchangedS:U

Impact

Longer bar: more harm

ConfidentialityHighC:H
IntegrityHighI:H
AvailabilityHighA:H
~2.8% estimated chance of attack in 30 daysModel estimate (): a probability signal, not confirmed exploitation
Exploited in the wild
Yes — confirmed exploitation (US CISA )
Not reported
Listed product
SonicWall SMA1000 appliance

Weaknesses

CWE-250CWE-862

Affected products ()

  • Sonicwall sma6200 Firmware
  • Sonicwall sma6200
  • Sonicwall sma6210 Firmware
  • Sonicwall sma6210
  • Sonicwall sma7200 Firmware
  • Sonicwall sma7200
  • Sonicwall sma7210 Firmware
  • Sonicwall sma7210
  • Sonicwall sma8200v
Show the raw CPE strings (9)
  • cpe:2.3:o:sonicwall:sma6200_firmware:*:*:*:*:*:*:*:*
  • cpe:2.3:h:sonicwall:sma6200:-:*:*:*:*:*:*:*
  • cpe:2.3:o:sonicwall:sma6210_firmware:*:*:*:*:*:*:*:*
  • cpe:2.3:h:sonicwall:sma6210:-:*:*:*:*:*:*:*
  • cpe:2.3:o:sonicwall:sma7200_firmware:*:*:*:*:*:*:*:*
  • cpe:2.3:h:sonicwall:sma7200:-:*:*:*:*:*:*:*
  • cpe:2.3:o:sonicwall:sma7210_firmware:*:*:*:*:*:*:*:*
  • cpe:2.3:h:sonicwall:sma7210:-:*:*:*:*:*:*:*
  • cpe:2.3:a:sonicwall:sma8200v:*:*:*:*:*:*:*:*

References

2 links from the CVE record, grouped by site; the vendor's advisory comes first.

Related feed events

  • SonicWall SMA1000 Missing Authorization Vulnerability

    Type Vulnerability

    SonicWall SMA1000 contains a missing authorisation vulnerability that could allow for privilege escalation appliance management console (AMC) of affected devices.

    Next step: Confirm whether SonicWall is in your estate.

    Who's reporting

    1 of 3 perspectives

    Official authority: Official 1Vendor statement missing. no VendorResearcher coverage missing. no Researcher1 signal

    Only official coverage so far. Treat as an early signal.

    SonicWall
    CVE-2025-40602