9.1
Critical
CVE-2025-40599 An authenticated arbitrary file upload vulnerability exists in the SMA 100 series web management interface
Description
An authenticated arbitrary file upload vulnerability exists in the SMA 100 series web management interface. A remote attacker with administrative privileges can exploit this flaw to upload arbitrary files to the system, potentially leading to remote code execution.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| SMA 100 Series | Versions not published |
Other CVEs of SMA 100 Series
The 4 CVEs of SMA 100 Series →
CVE-2025-40598
A Reflected cross-site scripting (XSS) vulnerability exists in the SMA100 series web interface, allowing a remote…
6.1
Medium
CVE-2025-40597
A Heap-based buffer overflow vulnerability in the SMA100 series web interface allows remote, unauthenticated attacker to…
7.5
High
CVE-2025-40596
A Stack-based buffer overflow vulnerability in the SMA100 series web interface allows remote, unauthenticated attacker…
7.3
High