Severity
High
Analysis Summary
CVE-2025-40595
A Server-side request forgery (SSRF) vulnerability has been identified in the SonicWall SMA1000 Appliance Work Place interface. By using an encoded URL, a remote unauthenticated attacker could potentially cause the appliance to make requests to unintended location.
Impact
- Gain Access
Indicators of Compromise
CVE
CVE-2025-40595
Affected Vendors
Sonicwall
Affected Products
- Sonicwall Sma1000 Firmware - 12.4.3-02925
Remediation
Refer to SonicWall Security Advisory for patch, upgrade, or suggested workaround information.