Logo
-

Byte Open Security

(ByteOS Network)

Log In

Sign Up

ByteOS

Security
Vulnerability Details
Registries
Custom Views
Weaknesses
Attack Patterns
Filters & Tools

sra_ex9000

Source -

NVD

CNA CVEs -

0

ADP CVEs -

0

CISA CVEs -

0

NVD CVEs -

1
Related CVEsRelated VendorsRelated AssignersReports
1Vulnerabilities found
CVE-2025-23006
Assigner-SonicWall, Inc.
ShareView Details
Assigner-SonicWall, Inc.
CVSS Score-9.8||CRITICAL
EPSS-38.65% / 97.14%
||
7 Day CHG+4.63%
Published-23 Jan, 2025 | 11:37
Updated-31 Oct, 2025 | 15:56
Rejected-Not Available
Known To Be Used In Ransomware Campaigns?-Not Available
KEV Added-Not Available
KEV Action Due Date-Not Available
Known KEV||Action Due Date - 2025-02-14||Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.

Pre-authentication deserialization of untrusted data vulnerability has been identified in the SMA1000 Appliance Management Console (AMC) and Central Management Console (CMC), which in specific conditions could potentially enable a remote unauthenticated attacker to execute arbitrary OS commands.

Action-Not Available
Vendor-SonicWall Inc.
Product-sra_ex7000sma7210sma6210sra_ex7000_firmwaresma7210_firmwaresma6200_firmwaresma7200_firmwaresma7200sra_ex6000_firmwaresra_ex9000_firmwaresra_ex9000sma8200vsma6210_firmwaresma6200sra_ex6000SMA1000SMA1000 Appliances
CWE ID-CWE-502
Deserialization of Untrusted Data