CVE-2025-40597: SonicWall SMA 100 Series: Heap-based buffer overflow vulnerability in the SMA100 series web interface allows remote, unauthenticated attacker to cause Denial of Service (DoS) or potentially results in code execution
This SonicWall advisory covers CVE-2025-40597 in SMA 100 Series.
- CVE-2025-40597
Key facts
- CISA KEV
- Not listed (catalogue checked )
- Affected
- SMA 100 Series 10.2.1.15-81sv and earlier versions
- Source published
- Source revised
- Listed by VulniPulse
Compiled by VulniPulse from the linked sources. How records are collected and checked.
Affected products & platforms
Description
A Heap-based buffer overflow vulnerability in the SMA100 series web interface allows remote, unauthenticated attacker to cause Denial of Service (DoS) or potentially results in code execution.
Affected product named by the advisory: SMA 100 Series.
Text from the source record.
- SMA 100 Series 10.2.1.15-81sv and earlier versions
Official advisory · medium-confidence parse· fetched ·verify at source
End-of-life dates for SonicWall Secure Mobile Access (SMA)
More SonicWall advisories
CVE-2026-107154Nov 6, 2026SonicOS: session validation vulnerability has been identified in the SonicOS managementCVE-2026-19703Nov 6, 2026weak password hashing vulnerability has been identified on SonicOS virtual appliancesCVE-2026-77709Nov 6, 2026pre-authentication heap-based buffer overflow vulnerability has been identifiedCVE-2026-77708Nov 6, 2026pre-authentication stack-based buffer overflow vulnerability has been identifiedCVE-2026-19868Nov 6, 2026authentication enforcement vulnerability in SonicOS SSLVPN serviceCVE-2026-82308Nov 6, 2026pre-authentication heap-based buffer overflow vulnerability has been identified
Get an email when SonicWall Secure Mobile Access (SMA) publishes the next one.
See SonicWall Secure Mobile Access (SMA)'s last 90 days of advisories first. Then choose one product with live alerts free for life, or a free month of real-time alerts on everything with the severity, the fixed version and the vendor's link (card needed, then US$15/month; we email you before the first charge).
iPhone and Android apps · New on the App Store
Monitor future SonicWall CVEs from your phone.
Choose a whole vendor or a precise platform, then receive matching security advisories by phone notification, email, or both. Coverage follows 34 official vendor sources and 160+ reviewed platform categories.
