CVE-2025-40595 — SonicWall / SMA1000

CVE-2025-40595

SonicWall / SMA1000 PUBLISHED

Description (CNA)

A Server-side request forgery (SSRF) vulnerability has been identified in the SMA1000 Appliance Work Place interface. By using an encoded URL, a remote unauthenticated attacker could potentially cause the appliance to make requests to unintended location.

Affected (CNA)

Vendor / product	Versions
SonicWall / SMA1000	affected 12.4.3-02925 (platform-hotfix) and earlier versions

CWE

CWE-918

References

https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2025-0010

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.