CVE-2025-32821

High · 7.2

CVSS

7.2

EPSS

22.2%

Published

May 7, 2025

CISA due date

—

The record

A vulnerability in SMA100 allows a remote authenticated attacker with SSLVPN admin privileges can with admin privileges can inject shell command arguments to upload a file on the appliance.

Affected packages

Ecosystem	Package	Introduced	Fixed