High WID-SEC-2025-1629 4 CVEs

SonicWall SMA 100 Serie: Mehrere Schwachstellen

Published Jul 23, 2025 · Updated Jul 23, 2025 · de-DE

Vendor: SonicWall Product: SMA

Summary

Ein entfernter anonymer oder authentisierter Angreifer kann mehrere Schwachstellen in der SonicWall SMA 100 Serie ausnutzen, um beliebigen Code auszuführen, einen Denial-of-Service-Zustand zu verursachen, Daten zu manipulieren und einen Cross-Site-Scripting-Angriff durchzuführen.

Product

SonicWall SMA ist ein Secure Access Gateway, mit dem Organisationen Zugang zu geschäftskritischen Unternehmensressourcen bereitstellen können.

Vulnerabilities 4

Critical 9.1

CVE-2025-40599

An authenticated arbitrary file upload vulnerability exists in the SMA 100 series web management interface. A remote at…

SonicWall SMA 100 Series Network devices

Jul 23, 2025
High 7.5

CVE-2025-40597 EPSS 23%

A Heap-based buffer overflow vulnerability in the SMA100 series web interface allows remote, unauthenticated attacker t…

SonicWall SMA 100 Series Network devices

Jul 23, 2025
High 7.3

CVE-2025-40596 EPSS 45%

A Stack-based buffer overflow vulnerability in the SMA100 series web interface allows remote, unauthenticated attacker …

SonicWall SMA 100 Series Network devices

Jul 23, 2025
Medium 6.1

CVE-2025-40598 EPSS 46%

A Reflected cross-site scripting (XSS) vulnerability exists in the SMA100 series web interface, allowing a remote unaut…

SonicWall SMA 100 Series Network devices

Jul 23, 2025

Revision history

2025-07-23 #1
Initiale Fassung

References

Sonicwall Security Advisory vom 2025-07-23
https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2025-0012
Sonicwall Security Advisory vom 2025-07-23
https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2025-0014