← Database

CVE-2025-40600

CRITICAL CVSS: 9.8 Published: 2025-07-29 Modified: 2026-06-17

Description

Use of Externally-Controlled Format String vulnerability in the SonicOS SSL VPN interface allows a remote unauthenticated attacker to cause service disruption.

Affected Platforms

Sonicwall Nsa 6700Sonicwall Tz270Sonicwall Nsa 4700Sonicwall Tz570PSonicwall Tz370WSonicwall Tz470WSonicwall Nsa 5700Sonicwall Nssp 13700Sonicwall Nsv870Sonicwall Tz570W

Weakness Type

CWE-134

References