Sonicwall Sma7210 Firmware vulnerabilities

2 known vulnerabilities affecting sonicwall/sma7210_firmware.

Total CVEs

2

CISA KEV

2

actively exploited

Public exploits

0

Exploited in wild

0

Severity breakdown

CRITICAL1MEDIUM1

Vulnerabilities

Page 1 of 1

CVE-2025-40602MEDIUMCVSS 6.6KEVfixed in 12.4.3-03245≥ 12.5.0, < 12.5.0-022832025-12-18

CVE-2025-40602 [MEDIUM] CWE-250 CVE-2025-40602: A local privilege escalation vulnerability due to insufficient authorization in the SonicWall SMA100 A local privilege escalation vulnerability due to insufficient authorization in the SonicWall SMA1000 appliance management console (AMC).

CVE-2025-23006CRITICALCVSS 9.8KEVfixed in 12.4.3-028542025-01-23

CVE-2025-23006 [CRITICAL] CWE-502 CVE-2025-23006: Pre-authentication deserialization of untrusted data vulnerability has been identified in the SMA100 Pre-authentication deserialization of untrusted data vulnerability has been identified in the SMA1000 Appliance Management Console (AMC) and Central Management Console (CMC), which in specific conditions could potentially enable a remote unauthenticated attacker to execute arbitrary OS commands.