KEVIntel
PRO Back to KEVs
N/A
No CVSS

CVE-2025-40597

PUBLISHED

A Heap-based buffer overflow vulnerability in the SMA100 series web interface allows remote, unauthenticated attacker to cause Denial of Service...

Vendor
SonicWall
Product
SMA 100 Series
Published
Jul 23, 2025
EPSS
—

Automate this intelligence with the Pro API

Everything on this page — CVSS, EPSS, exploit status, PoCs, scanner integrations, mentions, tags, and immediate honeypot data — is available programmatically for VM, SOC, and CTI workflows.

Learn about Pro

Description

A Heap-based buffer overflow vulnerability in the SMA100 series web interface allows remote, unauthenticated attacker to cause Denial of Service (DoS) or potentially results in code execution.

Weaknesses (CWE)

  • CWE-122

    Heap-based Buffer Overflow

CVSS scores

No CVSS data available.

Exploitation status

No exploitation signals recorded yet.

References

Timeline

  • CVE ID Reserved

  • CVE Published to Public