CVEvulnerability
CVE-2025-40603
4.5 MEDIUM
Official page ↗
- Status
- Analyzed
- Published
- 2025-10-31
- Last modified
- 2026-10-07
- Assigner
- [email protected]
- CVSS 3.1 (134c704f-9b21-4f2e-91b3-4a467353bcc0)
- 4.5 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:H/I:N/A:N
- Weaknesses
- CWE-532
Description
A potential exposure of sensitive information in log files in SonicWall SMA100 Series appliances may allow a remote, authenticated administrator, under certain conditions to view partial users credential data.
Affected configurations
• sonicwall sma 210 firmware (< 10.2.2.3)
• sonicwall sma 410 firmware (< 10.2.2.3)
• sonicwall sma 500v firmware (< 10.2.2.3)
Related
Weakness · CWE (1)
- CWE-532 Insertion of Sensitive Information into Log File weakness
References
- https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2025-0017 Vendor Advisory