A Reflected cross-site scripting (XSS) vulnerability exists in the SMA100 series web interface, allowing a remote unauthenticated attacker to potentially execute arbitrary JavaScript code.
CVSS
No CVSS.
References
Configurations
Configuration 1 (hide)
| AND |
|
Configuration 2 (hide)
| AND |
|
Configuration 3 (hide)
| AND |
|
History
07 Aug 2025, 14:36
| Type | Values Removed | Values Added |
|---|---|---|
| CPE | cpe:2.3:o:sonicwall:sma_410_firmware:*:*:*:*:*:*:*:* cpe:2.3:h:sonicwall:sma_210:-:*:*:*:*:*:*:* cpe:2.3:o:sonicwall:sma_210_firmware:*:*:*:*:*:*:*:* cpe:2.3:h:sonicwall:sma_500v:-:*:*:*:*:*:*:* cpe:2.3:h:sonicwall:sma_410:-:*:*:*:*:*:*:* cpe:2.3:o:sonicwall:sma_500v_firmware:*:*:*:*:*:*:*:* |
|
| First Time |
Sonicwall sma 410
Sonicwall sma 210 Sonicwall sma 210 Firmware Sonicwall sma 410 Firmware Sonicwall sma 500v Firmware Sonicwall sma 500v Sonicwall |
|
| References | () https://labs.watchtowr.com/stack-overflows-heap-overflows-and-existential-dread-sonicwall-sma100-cve-2025-40596-cve-2025-40597-and-cve-2025-40598/ - Third Party Advisory | |
| References | () https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2025-0012 - Vendor Advisory |
29 Jul 2025, 14:15
| Type | Values Removed | Values Added |
|---|---|---|
| CWE | ||
| References |
|
23 Jul 2025, 15:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2025-07-23 15:15
Updated : 2025-08-07 14:36
NVD link : CVE-2025-40598
Mitre link : CVE-2025-40598
JSON object : View
Products Affected
sonicwall
- sma_210
- sma_410_firmware
- sma_410
- sma_500v
- sma_210_firmware
- sma_500v_firmware
CWE
No CWE.