CVE-2025-40600

SonicWall / SonicOS PUBLISHED

Description (CNA)

Use of Externally-Controlled Format String vulnerability in the SonicOS SSL VPN interface allows a remote unauthenticated attacker to cause service disruption.

Affected (CNA)

Vendor / product	Versions
SonicWall / SonicOS	affected 7.2.0-7015 and older versions

CWE

CWE-134

References

https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2025-0013

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.