CVE-2025-40598

Name of the Vulnerable Software and Affected Versions SMA100 series versions (affected versions not specified)

Description A reflected cross-site scripting (XSS) vulnerability exists in the web interface, allowing a remote unauthenticated attacker to potentially execute arbitrary JavaScript code. Cross-site scripting (XSS) is a type of security flaw that allows attackers to inject malicious scripts into web pages viewed by other users.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.