CVE-2025-23006

Katalog CVE

CVSS 9.8 · Critical KEV · sudah dieksploitasi Dipakai ransomware EPSS 23,4%

Kerentanan Deserialization of Untrusted Data pada sonicwall sma8200v, sonicwall sma6200 firmware +6 lainnya. Skor CVSS 3.1 9.8 (Critical) menurut NVD. Masuk katalog KEV CISA pada 24 Januari 2025, artinya sudah terbukti dieksploitasi. Tercatat dipakai dalam kampanye ransomware.

Deskripsi (NVD)

Pre-authentication deserialization of untrusted data vulnerability has been identified in the SMA1000 Appliance Management Console (AMC) and Central Management Console (CMC), which in specific conditions could potentially enable a remote unauthenticated attacker to execute arbitrary OS commands.

Rincian

Terbit di NVD

23 Januari 2025

Terakhir diubah

24 September 2026

Status NVD

Analyzed

CVSS 3.1

9.8 (Critical), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-502: Deserialization of Untrusted Data

EPSS (30 hari)

23,4% peluang dieksploitasi; lebih tinggi dari 97,7% CVE lain

Known Exploited Vulnerabilities (CISA)

Nama

SonicWall SMA1000 Appliances Deserialization Vulnerability

Masuk KEV

24 Januari 2025

Tenggat CISA

14 Februari 2025 (untuk instansi federal AS)

Ransomware

Tercatat dipakai dalam kampanye ransomware

Tindakan wajib

Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2025-0002 advisory vendor
• https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2025-23006 pemerintah AS