CVE-2025-40603

Medium CVSS: 4.5

A potential exposure of sensitive information in log files in SonicWall SMA100 Series appliances may allow a remote, authenticated administrator, under certain conditions to view partial users credential data.

Vendor

Sonicwall

Product

Sma 210 Firmware

CWE

CWE-532

Yayın Tarihi

2025-10-31 11:15:34

Güncelleme

2025-11-06 16:26:50

Source Identifier

PSIRT@sonicwall.com

KEV Date Added

Kategoriler

CWE-532 Sma 210 Firmware MEDIUM Sonicwall 2025

Referanslar

https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2025-0017

Benzer Kayıtlar

Medium

CVE-2026-3439

A post-authentication Stack-based Buffer Overflow vulnerability in SonicOS certificate handling allows a remote attacker…

Medium

CVE-2026-0400

A post-authentication Format String vulnerability in SonicOS allows a remote attacker to crash a firewall.

Medium

CVE-2026-0401

A post-authentication NULL Pointer Dereference vulnerability in SonicOS allows a remote attacker to crash a firewall.

Medium

CVE-2026-0402

A post-authentication Out-of-bounds Read vulnerability in SonicOS allows a remote attacker to crash a firewall.

Medium

CVE-2026-0399

Multiple post-authentication stack-based buffer overflow vulnerabilities in the SonicOS management interface due to impr…

Medium

CVE-2025-40602

A local privilege escalation vulnerability due to insufficient authorization in the SonicWall SMA1000 appliance manageme…