SonicWall flags SSLVPN flaw allowing firewall crashes

Securityaffairs • November 23, 2025

Share: View original

SonicWall warns of a high-severity buffer overflow flaw in SonicOS SSLVPN (CVE-2025-40601) that lets attackers crash Gen7 and Gen8 firewalls.

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

SonicWall SonicOS Flaw Allows Remote Firewall Crashes SonicWall has disclosed a critical vulnerability in its SonicOS SSLVPN service, tracked as CVE-2025-40601, which allows remote, unauthenticated attackers to crash Gen7 and Gen8 firewalls. The flaw, caused by a stack-based buffer overflow, poses significant risks for organizations using SonicWall for network security. SonicWall has urged customers to apply patches immediately, although there are currently no reports of active exploitation. 11 sources 23

Extracted Entities

Attack Types (1)

Zero-day Exploit

Companies (1)

CVEs (1)

Vulnerabilities (1)