{"id":1890,"date":"2025-01-23T22:15:25","date_gmt":"2025-01-23T22:15:25","guid":{"rendered":"https:\/\/fusionmindlabs.com\/blogs\/2025\/01\/23\/sonicwall-urges-patch-for-critical-cve-2025-23006-flaw\/"},"modified":"2025-01-23T22:15:26","modified_gmt":"2025-01-23T22:15:26","slug":"sonicwall-urges-patch-for-critical-cve-2025-23006-flaw","status":"publish","type":"post","link":"https:\/\/fusionmindlabs.com\/blogs\/sonicwall-urges-patch-for-critical-cve-2025-23006-flaw\/","title":{"rendered":"SonicWall Urges Patch for Critical CVE-2025-23006 Flaw"},"content":{"rendered":"\n<\/p>\n

SonicWall Security Flaw: Zero-Day Vulnerability Exploited in the Wild<\/h1>\n

Date: January 23, 2025<\/h2>\n

Author: Ravie Lakshmanan<\/h3>\n

Tags: Vulnerability \/ Network Security<\/h4>\n
<\/a><\/div>\n

SonicWall has alerted customers to a critical security flaw in its Secure Mobile Access (SMA) 1000 Series appliances, which it claims has been exploited in the wild as a zero-day vulnerability. The vulnerability, tracked as CVE-2025-23006<\/strong>, is rated 9.8 out of a maximum of 10.0 on the CVSS scoring system.<\/p>\n

Vulnerability Details<\/h2>\n

The vulnerability, described as a pre-authentication deserialization of untrusted data vulnerability, has been identified in the SMA1000 Appliance Management Console (AMC) and Central Management Console (CMC). In specific conditions, this vulnerability could potentially enable a remote unauthenticated attacker to execute arbitrary OS commands.<\/p>\n

SonicWall has released an advisory detailing the vulnerability and its impact on the SMA 1000 Series appliances. The company has also released a patch, version 12.4.3-02854 (platform-hotfix), to address the flaw.<\/p>\n

Affected Products<\/h2>\n

The vulnerability does not affect SonicWall’s Firewall and SMA 100 series products. However, customers of the SMA 1000 Series appliances are advised to apply the fixes as soon as possible to prevent potential attack attempts.<\/p>\n

Exploitation and Mitigation<\/h2>\n

SonicWall has been notified of "possible active exploitation" by unspecified threat actors. To minimize the potential impact of the vulnerability, customers are recommended to restrict access to trusted sources for the Appliance Management Console (AMC) and Central Management Console (CMC).<\/p>\n

Discovery and Credits<\/h2>\n

The Microsoft Threat Intelligence Center (MSTIC) has been credited with discovering and reporting the security shortcoming.<\/p>\n

Additional Resources<\/h2>\n

For more information on the vulnerability and its impact, customers can refer to SonicWall’s advisory on their website.<\/p>\n

\"Cybersecurity\"<\/a><\/center><\/div>\n

<\/p>\n

Found this article interesting? Follow us on Twitter \uf099<\/i><\/a> and LinkedIn<\/a> to read more exclusive content we post.<\/div>\n\n
Source Link<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"

SonicWall Security Flaw: Zero-Day Vulnerability Exploited in the Wild Date: January 23, 2025 Author: Ravie Lakshmanan Tags: Vulnerability \/ Network Security SonicWall has alerted customers to a critical security flaw…<\/p>\n","protected":false},"author":19,"featured_media":1891,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[22],"tags":[46,39,32,31,33,34,35,40,36,37,42,44,43,41,38,45],"class_list":["post-1890","post","type-post","status-publish","format-standard","has-post-thumbnail","category-cybersecurity","tag-computer-security","tag-cyber-attacks","tag-cyber-news","tag-cyber-security-news","tag-cyber-security-news-today","tag-cyber-security-updates","tag-cyber-updates","tag-data-breach","tag-hacker-news","tag-hacking-news","tag-how-to-hack","tag-information-security","tag-network-security","tag-ransomware-malware","tag-software-vulnerability","tag-the-hacker-news"],"jetpack_featured_media_url":"https:\/\/fusionmindlabs.com\/blogs\/wp-content\/uploads\/sites\/9\/2025\/01\/sonic.jpg","_links":{"self":[{"href":"https:\/\/fusionmindlabs.com\/blogs\/wp-json\/wp\/v2\/posts\/1890","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/fusionmindlabs.com\/blogs\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/fusionmindlabs.com\/blogs\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/fusionmindlabs.com\/blogs\/wp-json\/wp\/v2\/users\/19"}],"replies":[{"embeddable":true,"href":"https:\/\/fusionmindlabs.com\/blogs\/wp-json\/wp\/v2\/comments?post=1890"}],"version-history":[{"count":1,"href":"https:\/\/fusionmindlabs.com\/blogs\/wp-json\/wp\/v2\/posts\/1890\/revisions"}],"predecessor-version":[{"id":1892,"href":"https:\/\/fusionmindlabs.com\/blogs\/wp-json\/wp\/v2\/posts\/1890\/revisions\/1892"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/fusionmindlabs.com\/blogs\/wp-json\/wp\/v2\/media\/1891"}],"wp:attachment":[{"href":"https:\/\/fusionmindlabs.com\/blogs\/wp-json\/wp\/v2\/media?parent=1890"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/fusionmindlabs.com\/blogs\/wp-json\/wp\/v2\/categories?post=1890"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/fusionmindlabs.com\/blogs\/wp-json\/wp\/v2\/tags?post=1890"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}