CVE-2025-40597

High · 7.5

CVSS

7.5

EPSS

31.2%

Published

Jul 23, 2025

CISA due date

—

The record

A Heap-based buffer overflow vulnerability in the SMA100 series web interface allows remote, unauthenticated attacker to cause Denial of Service (DoS) or potentially results in code execution.

Affected packages

Ecosystem	Package	Introduced	Fixed