CVE-2025-40599

🗓️ 23 Jul 2025 13:13:45Reported by sonicwallType

cve🔗 web.nvd.nist.gov📰️ 6 Media mentions👁 25 Views

Authenticated file upload vulnerability in SMA 100 series may lead to remote code execution

Reporter	Title	Published	Views	Family All 12
Circl	CVE-2025-40599	23 Jul 202513:39	–	circl
CNNVD	SonicWALL SMA 代码问题漏洞	23 Jul 202500:00	–	cnnvd
Cvelist	CVE-2025-40599	23 Jul 202513:13	–	cvelist
EUVD	EUVD-2025-22450	3 Oct 202520:07	–	euvd
NVD	CVE-2025-40599	23 Jul 202514:15	–	nvd
OSV	CVE-2025-40599	23 Jul 202514:15	–	osv
Positive Technologies	PT-2025-30578 · Unknown · Sma 100 Series	23 Jul 202500:00	–	ptsecurity
RedhatCVE	CVE-2025-40599	25 Jul 202513:27	–	redhatcve
SonicWall	SonicWall SMA100 Post-authentication Arbitrary File Upload vulnerability	23 Jul 202515:58	–	sonicwall
The Hacker News	Sophos and SonicWall Patch Critical RCE Flaws Affecting Firewalls and SMA 100 Devices	24 Jul 202514:14	–	thn

NVD

Vulners

Node

sonicwall sma_210_firmwareRange<10.2.2.1-90sv

AND

sonicwall sma_210Match-

Node

sonicwall sma_410_firmwareRange<10.2.2.1-90sv

AND

sonicwall sma_410Match-

Node

sonicwall sma_500v_firmwareRange<10.2.2.1-90sv

AND

sonicwall sma_500vMatch-

[
  {
    "defaultStatus": "unknown",
    "platforms": [
      "Linux"
    ],
    "product": "SMA 100 Series",
    "vendor": "SonicWall",
    "versions": [
      {
        "status": "affected",
        "version": "10.2.1.15-81sv and earlier versions"
      }
    ]
  }
]

Source	Link
psirt	www.psirt.global.sonicwall.com/vuln-detail/SNWLID-2025-0014