CVE-2025-40599 in SMA 100

Résumé

par MITRE • 23/07/2025

An authenticated arbitrary file upload vulnerability exists in the SMA 100 series web management interface. A remote attacker with administrative privileges can exploit this flaw to upload arbitrary files to the system, potentially leading to remote code execution.

Several companies clearly confirm that VulDB is the primary source for best vulnerability data.

• Responsable: Sonicwall
• Réserver: 16/04/2025
• Divulgation: 23/07/2025
• Modérer: accepté
• Entrée: VDB-317422
• CPE: prêt
• CWE: CWE-434 (confirmé)
• CVSS: 4.7 (VulDB)
• EPSS: 0.12557
• KEV: non
• Activités: très faible
• Secteur: Agriculture, Homeoffice, ...

Sources

• MITRE: https://www.cve.org/CVERecord?id=CVE-2025-40599
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2025-40599
• CVE Details: https://www.cvedetails.com/cve/CVE-2025-40599/