CVE-2019-25380: Smoothwall Express 3.1 'dhcp.cgi' Cross-Site Scripting

Security readout for executives and security teams

Smoothwall Express 3.1 has reflected cross-site scripting in its DHCP configuration page. An attacker could trick an administrator into submitting or visiting malicious content that runs script in the admin’s browser. This can expose session data or alter what the administrator sees, but it requires user interaction and affects a specific legacy product version. Exposure is most likely where Smoothwall Express 3.1 administration interfaces are reachable by users who can be socially engineered. Internet-exposed management interfaces increase risk. The source bundle does not identify other Smoothwall products or versions as affected. Treat as a moderate priority for any organization still running Smoothwall Express 3.1. The main business risk is administrator browser compromise leading to configuration tampering or credential exposure. Prioritize isolation or replacement if the management interface is exposed beyond trusted administrators. Mitigation focus: Inventory Smoothwall Express deployments and confirm whether version 3.1 is present.; Restrict access to the Smoothwall administrative interface to trusted networks and administrators.; Check Smoothwall or project guidance for updates, replacements, or configuration recommendations..

Prepared

Apr 30, 2026, 01:42 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.