Medium · 6.1 CVE-2025-40598 EUVD-2025-22454GHSA-x64w-w449-jx7q

A Reflected cross-site scripting (XSS) vulnerability exists in the SMA100 series web interface, allowing a remote unauthenticated attacker …

Published Jul 23, 2025 · Updated Jul 29, 2025 · Assigned by sonicwall

Vendor: SonicWall Product: SMA 100 Series Category: Network devices

Description

A Reflected cross-site scripting (XSS) vulnerability exists in the SMA100 series web interface, allowing a remote unauthenticated attacker to potentially execute arbitrary JavaScript code.

Affected products

Vendor	Product	Affected	Fixed
SonicWall	SMA 100 Series	10.2.1.15-81sv and earlier versions	—

Advisories 1

WID-SEC-2025-1629 SonicWall SMA 100 Serie: Mehrere Schwachstellen BSI CERT-Bund (WID) · Jul 23, 2025

References

https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2025-0012 vendor-advisory