Pre-authentication deserialization of untrusted data vulnerability has been identified in the SMA1000 Appliance Management Console (AMC) and Central Management Console (CMC), which in specific conditions could potentially enable a remote unauthenticated attacker to execute arbitrary OS commands.
CISA has listed this vulnerability in the Known Exploited Vulnerabilities catalog.
Pre-authentication deserialization of untrusted data vulnerability has been identified in the SMA1000 Appliance Management Console (AMC) and Central Management Console (CMC), which in specific conditions could potentially enable a remote unauthenticated attacker to execute arbitrary OS commands.
Confirm exposure before applying a vendor-supported change.
Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
Due date: 2025.02.14Confirm that SonicWall SMA1000, sma8200v, sma6200 firmware and an affected version are present.
Combine exploitation signals with asset exposure and business criticality.
Follow the vendor advisory or supported update path and preserve rollback options.
Recheck the version, service health, access paths, and relevant logs.
