CVE-2025-40601 — SonicWall / SonicOS

CVE-2025-40601

SonicWall / SonicOS PUBLISHED

Description (CNA)

A Stack-based buffer overflow vulnerability in the SonicOS SSLVPN service allows a remote unauthenticated attacker to cause Denial of Service (DoS), which could cause an impacted firewall to crash.

Affected (CNA)

Vendor / product	Versions
SonicWall / SonicOS	affected 7.3.0-7012 and older versions; affected 8.0.2-8011 and older versions

CWE

CWE-121

References

https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2025-0016

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.