VULNERABILITY INTELLIGENCE
CVE-2025-40603
CVSS score4.5 MEDIUM
EPSS probability0.48%
CISA KEVNot currently listed
Published2025-10-31
Last modified2026-10-07
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:H/I:N/A:N
Description
A potential exposure of sensitive information in log files in SonicWall SMA100 Series appliances may allow a remote, authenticated administrator, under certain conditions to view partial users credential data.
Weakness classification
- PSIRT@sonicwall.com: CWE-532
Primary references
- PSIRT@sonicwall.com — Vendor Advisory