SonicWall fixes bug rated 9.8 in mobile management appliance

Summary: In January 2025, SonicWall warned that CVE-2025-23006, a critical vulnerability in its SMA 1000 remote-access appliances, was being exploited. The vendor assigned a CVSS score of 9.8.

The issue concerned pre-authentication command execution through the Appliance Management Console and Central Management Console. SonicWall’s January notice listed firmware 12.4.3-02804 and earlier as affected and emphasized the risk from management interfaces exposed to the internet.

SMA 1000 is a remote-access appliance family; this report should not be interpreted as a flaw in every SonicWall product or as generic mobile-device management software.

CNB Telecom perspective

This is a historical alert, not a current firmware recommendation. Owners should consult the vendor’s latest advisory for their exact model and supported release, restrict administrative access, and investigate signs of compromise where exposure occurred. Installing a fix alone does not establish that an earlier intrusion never happened.

Original sources

SonicWall — Urgent Security Notification: SMA 1000 (updated January 23, 2025); SonicWall PSIRT — SNWLID-2025-0002

Independently summarized and reviewed by CNB Telecom

Historical alert; reviewed October 11, 2026.