Medium severity4.5NVD Advisory· Published Oct 31, 2025· Updated Jun 17, 2026

CVE-2025-40603

Description

A potential exposure of sensitive information in log files in SonicWall SMA100 Series appliances may allow a remote, authenticated administrator, under certain conditions to view partial users credential data.

Affected products

SonicWall/SMA1000 seriesllm-fuzzy
SonicWall/SMA100cpe-rescue
Range: 10.2.2.2-92sv and earlier versions
SonicWall/Sma 210 Firmware
cpe:2.3:o:sonicwall:sma_210_firmware:*:*:*:*:*:*:*:*
Range: <10.2.2.3
SonicWall/Sma 410 Firmware
cpe:2.3:o:sonicwall:sma_410_firmware:*:*:*:*:*:*:*:*
Range: <10.2.2.3
SonicWall/Sma 500v Firmware
cpe:2.3:o:sonicwall:sma_500v_firmware:*:*:*:*:*:*:*:*
Range: <10.2.2.3

Patches

Vulnerability mechanics

References

psirt.global.sonicwall.com/vuln-detail/SNWLID-2025-0017nvdVendor Advisory

News mentions

No linked articles in our index yet.

cvss	0.293
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000