CVE-2025-40602
KEVMEDIUM 6.6EPSS 2.8%
A local privilege escalation vulnerability due to insufficient authorization in the SonicWall SMA1000 appliance management console (AMC).
- Affected
- SonicWall · SMA1000
- CVSS v3.1 CNA
- 6.6 MEDIUM
CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H - EPSS
- 2.76% chance of exploitation in the next 30 days, 86th percentile
- CISA KEV
- added 2025-12-17
- Published
- 2025-12-18
Proof-of-concept exploits (1)
- cyberleelawat/CVE-2025-406021★ · 2025-12-18