Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

3 records

Advisory: SonicWall SMA 100 Series — psirt.global.sonicwall.com/vuln-detail/SNWLID-2025-0012 Clear all filters
TI-2025-27078 CVE-2025-40598 · GHSA-x64w-w449-jx7q

Cross-site scripting in SonicWall SMA 100 Series

Priority MEDIUM 60

A Reflected cross-site scripting (XSS) vulnerability exists in the SMA100 series web interface, allowing a remote unauthenticated attacker to potentially execute arbitrary JavaScript code.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.46154 Published 2025-07-23 No fix listed CWE-79
TI-2025-27077 CVE-2025-40597 · GHSA-wjrh-49mw-5943

Heap-based buffer overflow in SonicWall SMA 100 Series

Priority MEDIUM 61

A Heap-based buffer overflow vulnerability in the SMA100 series web interface allows remote, unauthenticated attacker to cause Denial of Service (DoS) or potentially results in code execution.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.22684 Published 2025-07-23 No fix listed CWE-122
TI-2025-27076 CVE-2025-40596 · GHSA-9c9q-24rh-frhg

Stack-based buffer overflow in SonicWall SMA 100 Series

Priority HIGH 69

A Stack-based buffer overflow vulnerability in the SMA100 series web interface allows remote, unauthenticated attacker to cause Denial of Service (DoS) or potentially results in code execution.

CVSS 3.1HIGH 7.3 Network No auth No interaction EPSS 0.45269 Published 2025-07-23 No fix listed CWE-121