CVE-2025-40599

Published Jul 23, 2025

Last updated 6 months ago

Overview

AI description

Automated description summarized from trusted sources.

CVE-2025-40599 is an authenticated arbitrary file upload vulnerability found in the web management interface of the SonicWall SMA 100 series. A remote attacker who has administrative privileges could exploit this vulnerability. Successful exploitation could allow the attacker to upload arbitrary files to the system, potentially leading to remote code execution. The vulnerability affects SMA 210, 410, and 500v appliances running firmware versions 10.2.1.15-81sv and earlier. To remediate this vulnerability, users should upgrade to version 10.2.2.1-90sv or higher.

Description: An authenticated arbitrary file upload vulnerability exists in the SMA 100 series web management interface. A remote attacker with administrative privileges can exploit this flaw to upload arbitrary files to the system, potentially leading to remote code execution.
Source: PSIRT@sonicwall.com
NVD status: Analyzed
Products: sma_210_firmware, sma_410_firmware, sma_500v_firmware

Risk scores

CVSS 3.1

Type: Secondary
Base score: 9.1
Impact score: 6
Exploitability score: 2.3
Vector string: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H
Severity: CRITICAL

Weaknesses

PSIRT@sonicwall.com: CWE-434

Hype score: Not currently trending

Configurations

[
  {
    "nodes": [
      {
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:o:sonicwall:sma_210_firmware:*:*:*:*:*:*:*:*",
            "matchCriteriaId": "786BB26D-B943-4564-B8CC-3260EF2AACED",
            "versionEndExcluding": "10.2.2.1-90sv",
            "vulnerable": true
          }
        ],
        "negate": false,
        "operator": "OR"
      },
      {
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:h:sonicwall:sma_210:-:*:*:*:*:*:*:*",
            "matchCriteriaId": "51587338-4A5F-41FC-9497-743F061947C2",
            "vulnerable": false
          }
        ],
        "negate": false,
        "operator": "OR"
      }
    ],
    "operator": "AND"
  },
  {
    "nodes": [
      {
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:o:sonicwall:sma_410_firmware:*:*:*:*:*:*:*:*",
            "matchCriteriaId": "057D8219-D4F0-49FB-8EE4-6BBBDAED49DB",
            "versionEndExcluding": "10.2.2.1-90sv",
            "vulnerable": true
          }
        ],
        "negate": false,
        "operator": "OR"
      },
      {
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:h:sonicwall:sma_410:-:*:*:*:*:*:*:*",
            "matchCriteriaId": "9DFB8FBC-FFA4-4526-B306-D5692A43DC9E",
            "vulnerable": false
          }
        ],
        "negate": false,
        "operator": "OR"
      }
    ],
    "operator": "AND"
  },
  {
    "nodes": [
      {
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:o:sonicwall:sma_500v_firmware:*:*:*:*:*:*:*:*",
            "matchCriteriaId": "3418E737-CB38-4736-9725-AD05A1AB29CF",
            "versionEndExcluding": "10.2.2.1-90sv",
            "vulnerable": true
          }
        ],
        "negate": false,
        "operator": "OR"
      },
      {
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:h:sonicwall:sma_500v:-:*:*:*:*:*:*:*",
            "matchCriteriaId": "A6AD8A33-7CE4-4C66-9E23-F0C9C9638770",
            "vulnerable": false
          }
        ],
        "negate": false,
        "operator": "OR"
      }
    ],
    "operator": "AND"
  }
]

References

Sources include official advisories and independent security research.