SonicOS SSLVPN Vulnerability Let Attackers Crash the Firewall Remotely

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

SonicWall SonicOS Vulnerability Allows Remote DoS Attacks SonicWall has issued a security advisory regarding a critical vulnerability in its SonicOS operating system, identified as CVE-2025-40601. This high-severity flaw affects Gen7 and Gen8 hardware and virtual appliances, allowing remote, unauthenticated attackers to exploit a stack-based buffer overflow in the SSLVPN service, resulting in a denial of service (DoS) condition. 9 sources 45