← Database

CVE-2025-40601

HIGH CVSS: 7.5 Published: 2025-11-20 Modified: 2026-06-17

Description

A Stack-based buffer overflow vulnerability in the SonicOS SSLVPN service allows a remote unauthenticated attacker to cause Denial of Service (DoS), which could cause an impacted firewall to crash.

Affected Platforms

Sonicwall Nsa 4800Sonicwall Nsa 6700Sonicwall Tz270Sonicwall Tz280Sonicwall Nsa 2800Sonicwall Tz80Sonicwall Nsa 4700Sonicwall Tz570PSonicwall Tz370WSonicwall Tz470W

Weakness Type

CWE-121

References