7.3
CVE-2025-40596
- EPSS 0.26%
- Veröffentlicht 23.07.2025 14:46:24
- Zuletzt bearbeitet 07.08.2025 14:36:26
- Quelle PSIRT@sonicwall.com
- CVE-Watchlists
- Unerledigt
A Stack-based buffer overflow vulnerability in the SMA100 series web interface allows remote, unauthenticated attacker to cause Denial of Service (DoS) or potentially results in code execution.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Sonicwall ≫ Sma 500v Firmware Version < 10.2.2.1-90sv
Sonicwall ≫ Sma 210 Firmware Version < 10.2.2.1-90sv
Sonicwall ≫ Sma 410 Firmware Version < 10.2.2.1-90sv
VulnDex Vulnerability Enrichment
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.26% | 0.494 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| 134c704f-9b21-4f2e-91b3-4a467353bcc0 | 7.3 | 3.9 | 3.4 |
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
|
CWE-121 Stack-based Buffer Overflow
A stack-based buffer overflow condition is a condition where the buffer being overwritten is allocated on the stack (i.e., is a local variable or, rarely, a parameter to a function).