CVE-2025-40601
7.5
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Exploitability: 3.9 / Impact: 3.6
Source: 134c704f-9b21-4f2e-91b3-4a467353bcc0 (Secondary)
Description
A Stack-based buffer overflow vulnerability in the SonicOS SSLVPN service allows a remote unauthenticated attacker to cause Denial of Service (DoS), which could cause an impacted firewall to crash.
Affected (2)
Configuration A
| Vulnerable Software | Affected Versions |
|---|---|
| From 7.1.1-7040 to 7.3.1-7013 |
| Running on/with | Platform Versions |
|---|---|
Sonicwall Nsa 2700 | All versions |
Sonicwall Nsa 3700 | All versions |
Sonicwall Nsa 4700 | All versions |
Sonicwall Nsa 5700 | All versions |
Sonicwall Nsa 6700 | All versions |
Sonicwall Nssp 10700 | All versions |
Sonicwall Nssp 11700 | All versions |
Sonicwall Nssp 13700 | All versions |
Sonicwall Nssp 15700 | All versions |
Sonicwall Nsv270 | All versions |
Sonicwall Nsv470 | All versions |
Sonicwall Nsv870 | All versions |
Sonicwall Tz270 | All versions |
Sonicwall Tz270w | All versions |
Sonicwall Tz370 | All versions |
Sonicwall Tz370w | All versions |
Sonicwall Tz470 | All versions |
Sonicwall Tz470w | All versions |
Sonicwall Tz570 | All versions |
Sonicwall Tz570p | All versions |
Sonicwall Tz570w | All versions |
Sonicwall Tz670 | All versions |
Configuration B
| Vulnerable Software | Affected Versions |
|---|---|
| Before 8.0.3-8011 |
| Running on/with | Platform Versions |
|---|---|
Sonicwall Nsa 2800 | All versions |
Sonicwall Nsa 3800 | All versions |
Sonicwall Nsa 4800 | All versions |
Sonicwall Nsa 5800 | All versions |
Sonicwall Tz280 | All versions |
Sonicwall Tz380 | All versions |
Sonicwall Tz480 | All versions |
Sonicwall Tz580 | All versions |
Sonicwall Tz680 | All versions |
Sonicwall Tz80 | All versions |
References (1)
Source: PSIRT@sonicwall.com
Vendor Advisory
Timeline
No history available yet.