critical9.1
CVE-2025-40599
An authenticated arbitrary file upload vulnerability exists in the SMA 100 series web management interface.
Impact
An authenticated arbitrary file upload vulnerability exists in the SMA 100 series web management interface. A remote attacker with administrative privileges can exploit this flaw to upload arbitrary files to the system, potentially leading to remote code execution.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Sonicwall | Sma 210 Firmware | before 10.2.2.1-90sv |
| Sonicwall | Sma 410 Firmware | before 10.2.2.1-90sv |
| Sonicwall | Sma 500v Firmware | before 10.2.2.1-90sv |