CVE-2025-40600
CRITICAL EPSS 53.3%
Published Jul 29, 202511mo ago · Modified Jun 17, 20261w ago
9.8 CVSS 3.1
Published Jul 29, 2025 11mo ago
Last Modified Jun 17, 2026 1w ago
Description
Use of Externally-Controlled Format String vulnerability in the SonicOS SSL VPN interface allows a remote unauthenticated attacker to cause service disruption.
CVSS Details
Base Score
Exploitability
Impact
Vector string
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Attack Vector Network
Attack Complexity Low
Privileges Required None
User Interaction None
Scope Unchanged
Confidentiality High
Integrity High
Availability High
Threat Intelligence
EPSS Exploit Probability
53.3% percentile
Exploit & Patch Status
No Known Exploit
No Patch Available
Weaknesses 1
CWE-134
Affected Products 23
| Vendor | Product | Version | Range |
|---|---|---|---|
| sonicwall | sonicos | * | ≥7.1.1-7040 – <7.3.0-7012 |
| sonicwall | nsa_2700 | * | any |
| sonicwall | nsa_3700 | * | any |
| sonicwall | nsa_4700 | * | any |
| sonicwall | nsa_5700 | * | any |
| sonicwall | nsa_6700 | * | any |
| sonicwall | nssp_10700 | * | any |
| sonicwall | nssp_11700 | * | any |
| sonicwall | nssp_13700 | * | any |
| sonicwall | nssp_15700 | * | any |
| sonicwall | nsv270 | * | any |
| sonicwall | nsv470 | * | any |
| sonicwall | nsv870 | * | any |
| sonicwall | tz270 | * | any |
| sonicwall | tz270w | * | any |
| sonicwall | tz370 | * | any |
| sonicwall | tz370w | * | any |
| sonicwall | tz470 | * | any |
| sonicwall | tz470w | * | any |
| sonicwall | tz570 | * | any |
| sonicwall | tz570p | * | any |
| sonicwall | tz570w | * | any |
| sonicwall | tz670 | * | any |
References 1
- psirt.global.sonicwall.com https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2025-0013
Remediation
No remediation data recorded yet
Check vendor advisories and the NVD entry for patch availability.