Approved changes feed: RSS · Atom

cpe:2.3:a:sonicwall:sma_100_series:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorSonicwall (28e2a9d1-aad2-54b9-a84d-b04e317de676)
ProductSma 100 Series (1b9586c7-f65d-5a4b-b56c-b654e4adebc2)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-40599 vulnerable 2026-06-08 07:25:05.176490 Details available
An authenticated arbitrary file upload vulnerability exists in the SMA 100 series web management interface. A remote attacker with administrative privileges can exploit this flaw to upload arbitrary files to the system, potentially leading to remote code execution.
Published: 2025-07-23T13:13:45.791Z
Updated: 2025-07-25T03:55:18.989Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-40598 vulnerable 2026-06-08 07:25:05.175693 Details available
A Reflected cross-site scripting (XSS) vulnerability exists in the SMA100 series web interface, allowing a remote unauthenticated attacker to potentially execute arbitrary JavaScript code.
Published: 2025-07-23T14:49:48.805Z
Updated: 2025-07-29T13:24:17.161Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-40597 vulnerable 2026-06-08 07:25:05.174974 Details available
A Heap-based buffer overflow vulnerability in the SMA100 series web interface allows remote, unauthenticated attacker to cause Denial of Service (DoS) or potentially results in code execution.
Published: 2025-07-23T14:48:36.604Z
Updated: 2026-02-26T17:50:16.718Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-40596 vulnerable 2026-06-08 07:25:05.161993 Details available
A Stack-based buffer overflow vulnerability in the SMA100 series web interface allows remote, unauthenticated attacker to cause Denial of Service (DoS) or potentially results in code execution.
Published: 2025-07-23T14:46:24.199Z
Updated: 2026-02-26T17:50:16.924Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.