Skip to content
CVE PROGRAM SOURCE RECORD9.1 Critical

CVE-2025-40599

An authenticated arbitrary file upload vulnerability exists in the SMA 100 series web management interface. A remote attacker with administrative privileges can exploit this flaw t

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
sonicwall

Description

An authenticated arbitrary file upload vulnerability exists in the SMA 100 series web management interface. A remote attacker with administrative privileges can exploit this flaw to upload arbitrary files to the system, potentially leading to remote code execution.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

SonicWall SMA 100 Series

Default version status: unknown

  • 10.2.1.15-81sv and earlier versionsaffected

References