CVE-2025-40602

EUVD-2025-204255
A local privilege escalation vulnerability due to insufficient authorization in the SonicWall SMA1000 appliance management console (AMC).
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
6.6 MEDIUM
NETWORK
HIGH
HIGH
CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H
CISA-ADPADP
6.6 MEDIUM
NETWORK
HIGH
HIGH
CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H
Base Score
CVSS 3.x
EPSS Score
Percentile: 52%
Affected Products (NVD)
VendorProductVersion
sonicwallsma6200_firmware
𝑥
< 12.4.3-03245
sonicwallsma6200_firmware
12.5.0 ≤
𝑥
< 12.5.0-02283
sonicwallsma6210_firmware
𝑥
< 12.4.3-03245
sonicwallsma6210_firmware
12.5.0 ≤
𝑥
< 12.5.0-02283
sonicwallsma7200_firmware
𝑥
< 12.4.3-03245
sonicwallsma7200_firmware
12.5.0 ≤
𝑥
< 12.5.0-02283
sonicwallsma7210_firmware
𝑥
< 12.4.3-03245
sonicwallsma7210_firmware
12.5.0 ≤
𝑥
< 12.5.0-02283
sonicwallsma8200v
𝑥
< 12.4.3-03245
sonicwallsma8200v
12.5.0 ≤
𝑥
< 12.5.0-02283
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2025-0019
https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2025-40602