CVE-2025-40598

🗓️ 23 Jul 2025 15:15:32Reported by [email protected]Type

nvd

nvd🔗 web.nvd.nist.gov👁 11 Views

Reflected cross-site scripting vulnerability in SMA100 web interface allows remote code execution.

Reporter	Title	Published	Views	Family All 14
Circl	CVE-2025-40598	23 Jul 202513:41	–	circl
CNNVD	SonicWall SMA 100 Series 跨站脚本漏洞	23 Jul 202500:00	–	cnnvd
CVE	CVE-2025-40598	23 Jul 202514:49	–	cve
Cvelist	CVE-2025-40598	23 Jul 202514:49	–	cvelist
EUVD	EUVD-2025-22454	3 Oct 202520:07	–	euvd
OSV	CVE-2025-40598	23 Jul 202515:15	–	osv
Positive Technologies	PT-2025-30589	23 Jul 202500:00	–	ptsecurity
Positive Technologies	PT-2025-30593	23 Jul 202500:00	–	ptsecurity
Positive Technologies	PT-2025-30594	23 Jul 202500:00	–	ptsecurity
RedhatCVE	CVE-2025-40598	25 Jul 202515:25	–	redhatcve

NVD

Node

sonicwall sma_500v_firmwareRange<10.2.2.1-90sv

AND

sonicwall sma_500vMatch-

Node

sonicwall sma_210_firmwareRange<10.2.2.1-90sv

AND

sonicwall sma_210Match-

Node

sonicwall sma_410_firmwareRange<10.2.2.1-90sv

AND

sonicwall sma_410Match-

Source	Link
psirt	www.psirt.global.sonicwall.com/vuln-detail/SNWLID-2025-0012
labs	www.labs.watchtowr.com/stack-overflows-heap-overflows-and-existential-dread-sonicwall-sma100-cve-2025-40596-cve-2025-40597-and-cve-2025-40598/

07 Aug 2025 14:36Current

CVSS 3.16.1

EPSS0.55869

reflected cross-site scripting sma100 series web interface remote attacker execute javascript code