{"cvss":9.8,"datePublished":"2025-01-24","dateUpdated":"2025-01-24","description":"SonicWall SMA1000 Appliance Management Console (AMC) and Central Management Console (CMC) contain a deserialization of untrusted data vulnerability, which can enable a remote, unauthenticated attacker to execute arbitrary OS commands.","dueDate":"2025-02-14","id":"CVE-2025-23006","kev_catalogs":["cisa"],"knownRansomwareCampaignUse":"Known","notes":"https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2025-0002 ; https://nvd.nist.gov/vuln/detail/CVE-2025-23006","product":"SMA1000 Appliances","requiredAction":"Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.","severity":"CRITICAL","source":"cisa_known_exploited","title":"SonicWall SMA1000 Appliances Deserialization Vulnerability","vendor":"SonicWall"}