Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2025-40597

A Heap-based buffer overflow vulnerability in the SMA100 series web interface allows remote, unauthenticated attacker to cause Denial of Service (DoS) or potentially results in code execution.

Published

2025-07-23T15:15:32.320

Last Modified

2025-08-07T14:36:16.930

Status

Analyzed

Source

[email protected]

Severity

CVSSv3.1: 7.5 (HIGH)

Weaknesses
  • Type: Primary
    CWE-122
Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Operating System sonicwall sma_500v_firmware < 10.2.2.1-90sv Yes
Hardware sonicwall sma_500v - No
Operating System sonicwall sma_210_firmware < 10.2.2.1-90sv Yes
Hardware sonicwall sma_210 - No
Operating System sonicwall sma_410_firmware < 10.2.2.1-90sv Yes
Hardware sonicwall sma_410 - No
References