PT-2025-30594 · Unknown · Sma 100 Series

Sina Kheirkhah

·

Published

2025-07-23

·

Updated

2025-09-26

·

CVE-2025-40598

CVSS v2.0

7.5

High

VectorAV:N/AC:L/Au:N/C:P/I:P/A:P
Name of the Vulnerable Software and Affected Versions SMA100 series versions (affected versions not specified)
Description A reflected cross-site scripting (XSS) vulnerability exists in the web interface, allowing a remote unauthenticated attacker to potentially execute arbitrary JavaScript code. Cross-site scripting (XSS) is a type of security flaw that allows attackers to inject malicious scripts into web pages viewed by other users.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

XSS

Weakness Enumeration

CWE-79

Related Identifiers

BDU:2025-10713
CVE-2025-40598

Affected Products

Sma 100 Series