Sonicwall SMA 100 Series vulnerabilities
4 vulnerabilities
Known vulnerabilities in Sonicwall SMA 100 Series, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
CVE-2025-40598sonicwallsma 100 series+3
EPSS score64.45%
A Reflected cross-site scripting (XSS) vulnerability exists in the SMA100 series web interface, allowing a remote unauthenticated attacker to potentially execute arbitrary JavaScript code.CVE-2025-40597sonicwallsma 100 series+3EPSS score31.25%
A Heap-based buffer overflow vulnerability in the SMA100 series web interface allows remote, unauthenticated attacker to cause Denial of Service (DoS) or potentially results in code execution.CVE-2025-40596sonicwallsma 100 series+3EPSS score57.35%
A Stack-based buffer overflow vulnerability in the SMA100 series web interface allows remote, unauthenticated attacker to cause Denial of Service (DoS) or potentially results in code execution.CVE-2025-40599sonicwallsma 100 series+3EPSS score14.70%
An authenticated arbitrary file upload vulnerability exists in the SMA 100 series web management interface. A remote attacker with administrative privileges can exploit this flaw to upload arbitrary files to the system, potentially leading to remote code execution.