Servers and applications
CVE-2025-40601
A Stack-based buffer overflow vulnerability in the SonicOS SSLVPN service allows a remote unauthenticated attacker to cause Denial of Service (DoS), which could cause an impacted firewall to crash.
- Severity
- High 7.5
- Published
- 20 Nov 2025
- Last changed
- 18 Oct 2026
- Added to UpHeron
- 1 Nov 2026
- Fixed in
- 7.3.1-7013, 8.0.3-8011
- Sources
- NVD
Affected software
| Software | Affected versions |
|---|---|
SonicWall SonicOSServers and applications · cpe:o:sonicwall:sonicos |
|