CVE-2025-40597

INFO Priority: 0.00 BB Relevance: 5/100
Published: 2025-07-23 Modified: 2026-11-03 First seen: 2026-11-03 Status: pending_score

Description

A Heap-based buffer overflow vulnerability in the SMA100 series web interface allows remote, unauthenticated attacker to cause Denial of Service (DoS) or potentially results in code execution.

Affected Software (1)

VendorProductVersion
SonicWall SMA 100 Series 10.2.1.15-81sv and earlier versions

References & Advisories (1)

Bug Bounty Relevance

5 / 100

CVSS Score

Unscored

EPSS — Exploitation Probability

22.68%
Raw Score 0.226840
Percentile 97.8%
Date 2026-11-14

EPSS Trend

2026-11-14
0.22684
2026-11-13
0.22684
2026-11-12
0.22684
2026-11-10
0.22684
2026-11-09
0.22684
2026-11-08
0.22684
2026-11-07
0.22684
2026-11-06
0.22684
2026-11-05
0.22684
2026-11-04
0.22684
2026-11-03
0.22684

Intelligence Sources

mitre ref →