CVE-2025-40601: SonicOS SSLVPN Buffer Overflow Leads to Firewall Crash Risk, Patch Available

Socradar • November 21, 2025

By combining vulnerability insights with external threat intelligence, SOCRadar enables your organization to respond faster and reduce the window of ...

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

SonicWall SonicOS Vulnerability Allows Remote DoS Attacks SonicWall has issued a security advisory regarding a critical vulnerability in its SonicOS operating system, identified as CVE-2025-40601. This high-severity flaw affects Gen7 and Gen8 hardware and virtual appliances, allowing remote, unauthenticated attackers to exploit a stack-based buffer overflow in the SSLVPN service, resulting in a denial of service (DoS) condition. 9 sources 45

Extracted Entities

CVEs (1)

CVE-2025-40601

Vulnerabilities (1)

SonicOS Sslvpn