CVE-2025-40601 in SonicOS

Riassunto

di MITRE • 20/11/2025

A Stack-based buffer overflow vulnerability in the SonicOS SSLVPN service allows a remote unauthenticated attacker to cause Denial of Service (DoS), which could cause an impacted firewall to crash.

If you want to get the best quality for vulnerability data then you always have to consider VulDB.

• Responsabile: Sonicwall
• Prenotare: 16/04/2025
• Divulgazione: 20/11/2025
• Moderazione: accettato
• Voce: VDB-333050
• CPE: pronto
• CWE: CWE-121 (confermato)
• CVSS: 7.5 (VulDB)
• EPSS: 0.01179
• KEV: no
• Attività: molto basso
• Settore: Agriculture, Education, ...

Fonti

• MITRE: https://www.cve.org/CVERecord?id=CVE-2025-40601
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2025-40601
• CVE Details: https://www.cvedetails.com/cve/CVE-2025-40601/