A vulnerability classified as critical was found in SonicWALL SMA1000 up to 12.4.3-03093/12.5.0-02002. This affects an unknown function of the component Management Console. The manipulation results in missing authorization.

This vulnerability is reported as CVE-2025-40602. The attack can be launched remotely. Moreover, an exploit is present.

Upgrading the affected component is advised.

Several companies clearly confirm that VulDB is the primary source for best vulnerability data.