CVE-2025-40599

🗓️ 23 Jul 2025 13:13:45Reported by sonicwallType

cve🔗 web.nvd.nist.gov📰️ 6 Media mentions👁 38 Views

Authenticated file upload vulnerability in SMA 100 series may lead to remote code execution

Reporter	Title	Published	Views	Family All 13
BDU FSTEC	The vulnerability of SonicWall SMA 100 series network intrusion prevention systems’ microprogramming software lies in their ability to download files of a malicious nature without limitation, allowing attackers to execute arbitrary codes.	3 Sep 202500:00	–	bdu_fstec
Circl	CVE-2025-40599	23 Jul 202513:39	–	circl
CNNVD	SonicWALL SMA 代码问题漏洞	23 Jul 202500:00	–	cnnvd
Cvelist	CVE-2025-40599	23 Jul 202513:13	–	cvelist
EUVD	EUVD-2025-22450	3 Oct 202520:07	–	euvd
NVD	CVE-2025-40599	23 Jul 202514:15	–	nvd
OSV	CVE-2025-40599	23 Jul 202514:15	–	osv
Positive Technologies	PT-2025-30578 · Unknown · Sma 100 Series	23 Jul 202500:00	–	ptsecurity
RedhatCVE	CVE-2025-40599	25 Jul 202513:27	–	redhatcve
SonicWall	SonicWall SMA100 Post-authentication Arbitrary File Upload vulnerability	23 Jul 202515:58	–	sonicwall

NVD

Vulners

Node

AND

sonicwall sma_210_firmwareRange<10.2.2.1-90sv

sonicwall sma_210Match-

Node

AND

sonicwall sma_410_firmwareRange<10.2.2.1-90sv

sonicwall sma_410Match-

Node

AND

sonicwall sma_500v_firmwareRange<10.2.2.1-90sv

sonicwall sma_500vMatch-

[
  {
    "defaultStatus": "unknown",
    "platforms": [
      "Linux"
    ],
    "product": "SMA 100 Series",
    "vendor": "SonicWall",
    "versions": [
      {
        "status": "affected",
        "version": "10.2.1.15-81sv and earlier versions"
      }
    ]
  }
]