THREATOPS

THREAT OPS › Threat News › [NVD] CVE-2025-23006 (CRITICAL 9.8) — Pre-authentication deserialization of untrusted data vulnerability has been identified in the SMA1000 Appliance Management Console (AMC) and Central Management Console (CMC), which in specific conditions could potentially enable a remote unauthenticated attacker to execute arbitr

[NVD] CVE-2025-23006 (CRITICAL 9.8) — Pre-authentication deserialization of untrusted data vulnerability has been identified in the SMA1000 Appliance Management Console (AMC) and Central Management Console (CMC), which in specific conditions could potentially enable a remote unauthenticated attacker to execute arbitr

lownvdPublished 2025-01-23

CVE-2025-23006 CVSS: 9.8 CRITICAL Published: 2025-01-23T12:15:28.523

Pre-authentication deserialization of untrusted data vulnerability has been identified in the SMA1000 Appliance Management Console (AMC) and Central Management Console (CMC), which in specific conditions could potentially enable a remote unauthenticated attacker to execute arbitrary OS commands.

Indicators of compromise

CVE-2025-23006cve

Original source: https://nvd.nist.gov/vuln/detail/CVE-2025-23006