CVE-2025-40603: Medium severity SonicWall SMA100 Series vulnerability
Published Oct 31, 2025
·Updated
A potential exposure of sensitive information in log files in SonicWall SMA100 Series appliances may allow a remote, authenticated administrator, under certain conditions to view partial users credential data.
Affected Software
7 affected components
SonicWall SMA100 Series
All of the following
SonicWall Sma 210 Firmware<10.2.2.3
SonicWall Sma 210
All of the following
SonicWall Sma 410 Firmware<10.2.2.3
SonicWall Sma 410
All of the following
SonicWall Sma 500v Firmware<10.2.2.3
SonicWall Sma 500v
Event History
Oct 31, 2025
CVE Published
via MITRE·11:01 AM
Data Sourced
via MITRE·11:01 AM
DescriptionWeakness
Data Sourced
via NVD·11:15 AM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2025-40603?
CVE-2025-40603 has a severity rating that indicates a moderate risk of sensitive information exposure.
2
How do I fix CVE-2025-40603?
To fix CVE-2025-40603, update your SonicWall SMA100 Series appliances to the latest firmware version provided by SonicWall.
3
What kind of information can be exposed in CVE-2025-40603?
CVE-2025-40603 may expose partial user credential data in log files.
4
Who is affected by CVE-2025-40603?
Remote, authenticated administrators of SonicWall SMA100 Series appliances are potentially affected by CVE-2025-40603.
5
What conditions lead to CVE-2025-40603 being exploitable?
CVE-2025-40603 is exploitable under specific conditions that allow log files to be improperly accessed by users.