CVE-2025-40601
HIGH EPSS 60.8%
Published Nov 20, 20257mo ago · Modified Jun 17, 20261w ago
7.5 CVSS 3.1
Published Nov 20, 2025 7mo ago
Last Modified Jun 17, 2026 1w ago
Description
A Stack-based buffer overflow vulnerability in the SonicOS SSLVPN service allows a remote unauthenticated attacker to cause Denial of Service (DoS), which could cause an impacted firewall to crash.
CVSS Details
Base Score
Exploitability
Impact
Vector string
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H Attack Vector Network
Attack Complexity Low
Privileges Required None
User Interaction None
Scope Unchanged
Confidentiality None
Integrity None
Availability High
Threat Intelligence
EPSS Exploit Probability
60.8% percentile
Exploit & Patch Status
No Known Exploit
No Patch Available
Weaknesses 1
CWE-121
Affected Products 34
| Vendor | Product | Version | Range |
|---|---|---|---|
| sonicwall | sonicos | * | ≥7.1.1-7040 – <7.3.1-7013 |
| sonicwall | nsa_2700 | * | any |
| sonicwall | nsa_3700 | * | any |
| sonicwall | nsa_4700 | * | any |
| sonicwall | nsa_5700 | * | any |
| sonicwall | nsa_6700 | * | any |
| sonicwall | nssp_10700 | * | any |
| sonicwall | nssp_11700 | * | any |
| sonicwall | nssp_13700 | * | any |
| sonicwall | nssp_15700 | * | any |
| sonicwall | nsv270 | * | any |
| sonicwall | nsv470 | * | any |
| sonicwall | nsv870 | * | any |
| sonicwall | tz270 | * | any |
| sonicwall | tz270w | * | any |
| sonicwall | tz370 | * | any |
| sonicwall | tz370w | * | any |
| sonicwall | tz470 | * | any |
| sonicwall | tz470w | * | any |
| sonicwall | tz570 | * | any |
| sonicwall | tz570p | * | any |
| sonicwall | tz570w | * | any |
| sonicwall | tz670 | * | any |
| sonicwall | sonicos | * | <8.0.3-8011 |
| sonicwall | nsa_2800 | * | any |
| sonicwall | nsa_3800 | * | any |
| sonicwall | nsa_4800 | * | any |
| sonicwall | nsa_5800 | * | any |
| sonicwall | tz280 | * | any |
| sonicwall | tz380 | * | any |
| sonicwall | tz480 | * | any |
| sonicwall | tz580 | * | any |
| sonicwall | tz680 | * | any |
| sonicwall | tz80 | * | any |
References 1
- psirt.global.sonicwall.com https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2025-0016
Remediation
No remediation data recorded yet
Check vendor advisories and the NVD entry for patch availability.