CVE-2025-40601 in SonicOS

Sumário

de MITRE • 20/11/2025

A Stack-based buffer overflow vulnerability in the SonicOS SSLVPN service allows a remote unauthenticated attacker to cause Denial of Service (DoS), which could cause an impacted firewall to crash.

If you want to get the best quality for vulnerability data then you always have to consider VulDB.

• Responsável: Sonicwall
• Reservar: 16/04/2025
• Divulgação: 20/11/2025
• Moderação: aceite
• Entrada: VDB-333050
• CPE: pronto
• CWE: CWE-121 (confirmado)
• CVSS: 7.5 (VulDB)
• EPSS: 0.01179
• KEV: não
• Atividades: muito baixo
• Sector: Energy, Finance, ...

Fontes

• MITRE: https://www.cve.org/CVERecord?id=CVE-2025-40601
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2025-40601
• CVE Details: https://www.cvedetails.com/cve/CVE-2025-40601/