CVE-2019-25382: Smoothwall Express 3.1 'time.cgi' Cross-Site Scripting

Security readout for executives and security teams

CVE-2019-25382 is a reflected cross-site scripting issue in Smoothwall Express 3.1. An unauthenticated attacker could trick a user into submitting crafted input to the time.cgi NTP settings endpoint, causing script execution in that user’s browser. Business risk is mainly account/session compromise or unauthorized changes if an administrator is targeted. Exposure is most relevant where Smoothwall Express 3.1 management functionality is reachable by untrusted users or administrators can be socially engineered. The source bundle does not establish broader affected versions beyond Smoothwall Express 3.1. Treat as a moderate-priority administrative-interface risk. Prioritize exposed Smoothwall Express 3.1 systems, especially where administrators access the interface from normal workstations or email-enabled browsers. Mitigation focus: Check Smoothwall vendor guidance for updates, configuration advice, or supported upgrade paths.; Inventory Smoothwall Express 3.1 systems and prioritize internet-accessible or broadly reachable instances.; Limit management interface access to trusted administrative networks where operationally possible..

Prepared

Apr 30, 2026, 01:42 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.