6.1
Medium
CVE-2025-40598 A Reflected cross-site scripting (XSS) vulnerability exists in the SMA100 series web interface, allowing a remote…
Description
A Reflected cross-site scripting (XSS) vulnerability exists in the SMA100 series web interface, allowing a remote unauthenticated attacker to potentially execute arbitrary JavaScript code.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| SMA 100 Series | Versions not published |
Other CVEs of SMA 100 Series
The 4 CVEs of SMA 100 Series →
CVE-2025-40597
A Heap-based buffer overflow vulnerability in the SMA100 series web interface allows remote, unauthenticated attacker to…
7.5
High
CVE-2025-40596
A Stack-based buffer overflow vulnerability in the SMA100 series web interface allows remote, unauthenticated attacker…
7.3
High
CVE-2025-40599
An authenticated arbitrary file upload vulnerability exists in the SMA 100 series web management interface
9.1
Critical