PerimeterClock

Patch-to-exploitation timelines for edge appliances (Fortinet, SonicWall, Ivanti), with detection rules.

CVE-2025-40602: SonicWall SMA1000 Missing Authorization Vulnerability

Vendor: SonicWall
Product: SMA1000 appliance
EPSS: 0.028 (86.2th percentile, 2026-10-30)

Summary

The SonicWall SMA1000 appliance contains a missing authorization vulnerability that could allow an attacker with local access to escalate privileges on the appliance management console. CISA added this vulnerability to its Known Exploited Vulnerabilities catalog on 2025-12-17.

Automated summary, checked against CISA and vendor descriptions; not yet reviewed by an analyst.

Timeline

Date Event Source
2025-12-17 Added to CISA KEV (confirmed exploitation) CISA KEV

References

Affected and fixed versions: see the vendor advisory or NVD entry below.