SonicWall has alerted customers about a significant vulnerability (CVE-2025-23006) in its SMA1000 remote access appliance, enabling hackers to infiltrate corporate networks without requiring a login. Discovered by Microsoft, this zero-day vulnerability has already been actively exploited, compromising several corporate systems. SonicWall encourages immediate patching following a released security hotfix. With thousands of vulnerable devices exposed to the internet, the need for swift action is critical, reflecting a growing trend of attacks on corporate cybersecurity products that are meant to provide network security.
SonicWall reported a vulnerability in its SMA1000 remote access appliance, allowing hackers to infiltrate corporate networks easily, emphasizing the call for immediate patching.
The newly identified vulnerability CVE-2025-23006 permits external actors to install malware without authentication, posing severe risks for companies using the affected appliances.
Collection
[
|
...
]