Analysis Summary

CVE-2025-40595

A Server-side request forgery (SSRF) vulnerability has been identified in the SonicWall SMA1000 Appliance Work Place interface. By using an encoded URL, a remote unauthenticated attacker could potentially cause the appliance to make requests to unintended location.

Impact

• Gain Access

Indicators of Compromise

CVE

• CVE-2025-40595

Affected Vendors

Remediation

Refer to SonicWall Security Advisory for patch, upgrade, or suggested workaround information.

SonicWall Security Advisory