← Database

CVE-2025-40598

MEDIUM CVSS: 6.1 Published: 2025-07-23 Modified: 2026-06-17

Description

A Reflected cross-site scripting (XSS) vulnerability exists in the SMA100 series web interface, allowing a remote unauthenticated attacker to potentially execute arbitrary JavaScript code.

Affected Platforms

Sonicwall Sma 500VSonicwall Sma 410 FirmwareSonicwall Sma 500V FirmwareSonicwall Sma 210 FirmwareSonicwall Sma 210Sonicwall Sma 410

Weakness Type

CWE-79

References