Not a U.S. government website. NDD is an independent vulnerability database by Volerion and is not affiliated with or endorsed by NIST or NVD.

CVE-2025-40602 Details

A local privilege escalation vulnerability due to insufficient authorization in the SonicWall SMA1000 appliance management console (AMC).

CVSS 3.x Severity and Vector Strings:

CNA: CISA-ADPCVSS-B:6.6 MEDIUMVector:CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H

By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.

URL	Source(s)	Tag(s)
https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2025-40602	CISA-ADP	US Government Resource
https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2025-0019	[email protected]	Vendor Advisory

This CVE is in CISA's Known Exploited Vulnerabilities Catalog

Vulnerability Name	Date Added	Due Date	Required Action
SonicWall SMA1000 Missing Authorization Vulnerability	Dec 17, 2025	Dec 24, 2025	Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable

CWE-ID	CWE Name	Source
CWE-250	Execution with Unnecessary Privileges	[email protected]
CWE-862	Missing Authorization	[email protected]

Product	Versions
sonicwall sma6200 firmware	< 12.4.3-03245 >= 12.5.0, < 12.5.0-02283
CPE cpe:2.3:o:sonicwall:sma6200_firmware:::::::: Remediation No remediation found in references.
sonicwall sma6200	All versions
CPE cpe:2.3:h:sonicwall:sma6200:-:::::::* Remediation No remediation found in references.
sonicwall sma6210 firmware	< 12.4.3-03245 >= 12.5.0, < 12.5.0-02283
CPE cpe:2.3:o:sonicwall:sma6210_firmware:::::::: Remediation No remediation found in references.
sonicwall sma6210	All versions
CPE cpe:2.3:h:sonicwall:sma6210:-:::::::* Remediation No remediation found in references.
sonicwall sma7200 firmware	< 12.4.3-03245 >= 12.5.0, < 12.5.0-02283
CPE cpe:2.3:o:sonicwall:sma7200_firmware:::::::: Remediation No remediation found in references.
sonicwall sma7200	All versions
CPE cpe:2.3:h:sonicwall:sma7200:-:::::::* Remediation No remediation found in references.
sonicwall sma7210 firmware	< 12.4.3-03245 >= 12.5.0, < 12.5.0-02283
CPE cpe:2.3:o:sonicwall:sma7210_firmware:::::::: Remediation No remediation found in references.
sonicwall sma7210	All versions
CPE cpe:2.3:h:sonicwall:sma7210:-:::::::* Remediation No remediation found in references.
sonicwall sma8200v	< 12.4.3-03245 >= 12.5.0, < 12.5.0-02283
CPE cpe:2.3:a:sonicwall:sma8200v:::::::: Remediation No remediation found in references.

5 change records found show changes