H3XAOperational intelligence
Live analytical pictureEvidence before assessment
Threat intelligence / Vulnerability

CVE-2025-40602

SonicWall SMA1000 contains a missing authorization vulnerability that could allow for privilege escalation appliance management console (AMC) of affected devices.

Vulnerability
TypeVulnerability
External ID—
First seen2025-12-17
Last seen2025-12-17

Confidence

—

SonicWall SMA1000 contains a missing authorization vulnerability that could allow for privilege escalation appliance management console (AMC) of affected devices.

Labels

exploitedkev

CISA KEV context

Vendor / productSonicWall SMA1000 appliance
Added2025-12-17
Due date2025-12-24
5 recorded

Relationships

mitigates
from Remediate CVE-2025-40602
Mitigation
related-to
to Cross Zone Scripting
Technique
related-to
to Expanding Control over the Operating System from the Database
Technique
related-to
to Exploitation of Thunderbolt Protection Flaws
Technique
related-to
to Target Programs with Elevated Privileges
Technique
3 external

References

nvd
CVE-2025-40602
open
cwe
CWE-862
open
cwe
CWE-250
open
Continue into the dataIntelligence explorerHow to read the graphEvidence & provenance