CVE-2025-40602 CISA KEV · Actively exploited
SonicWall SMA1000 Missing Authorization Vulnerability
CVSS score
—
EPSS probability
%2.8
Risk score
—
Published
10 mo ago
Public Exploits · GitHub and Metasploit Intelligence
This tab scans the sources that NVD labels as exploits, GitHub repositories matching the CVE identifier and Rapid7 Metasploit Framework modules. Only links to sources that were actually found are shown.
GitHub
CVE-2025-40602 is a local privilege escalation vulnerability in the appliance management console (AMC) of SonicWall Secure Mobile Access (SMA) 1000 series appliances.
Makefile Go / Python
Similar Vulnerabilities
10.0
CVE-2021-44228 Actively exploitedImproper input validation in Apache Log4j
Patch verified Public Exploits:22EPSS %100
9.8
CVE-2024-53704 Actively exploitedImproper authentication in SonicWall SonicOS
Patch status unknown Public Exploits:1EPSS %95
9.8
CVE-2021-20021 Actively exploitedImproper privilege management in SonicWall Email Security
Workaround Public Exploits:2EPSS %89
7.5
CVE-2019-7481 Actively exploitedSQL injection in SonicWall SMA100
Workaround Public Exploits:1EPSS %100
8.1
CVE-2024-6387Openssh: regresshion - race condition in ssh allows rce/dos
Patch verified Public Exploits:8EPSS %100
9.8
CVE-2021-20016 Actively exploitedSQL injection in SonicWall SMA100
WorkaroundEPSS %40
Get this vulnerability through the API
Affected products, version ranges, exploitation status and patch information in a single request, with a free key.
curl -H "x-api-key: $DAYBREACH_API_KEY" \ "https://api.daybreach.dev/api/v1/intel/cves/CVE-2025-40602"