SonicWall flags SSLVPN flaw allowing firewall crashes

Securityaffairs.Co •Pierluigi Paganini • November 23, 2025

SonicWall warns of a high-severity buffer overflow flaw in SonicOS SSLVPN (CVE-2025-40601) that lets attackers crash Gen7 and Gen8 firewalls. A new high-severity SonicOS SSLVPN flaw, tracked as CVE-2025-40601 (CVSS score of 7.5), allows attackers to crash SonicWall Gen7 and Gen8 firewalls. SonicWall is urging all customers to apply patches immediately, as the issue stems […]

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

SonicWall SonicOS Flaw Allows Remote Firewall Crashes SonicWall has disclosed a critical vulnerability in its SonicOS SSLVPN service, tracked as CVE-2025-40601, which allows remote, unauthenticated attackers to crash Gen7 and Gen8 firewalls. The flaw, caused by a stack-based buffer overflow, poses significant risks for organizations using SonicWall for network security. SonicWall has urged customers to apply patches immediately, although there are currently no reports of active exploitation. 11 sources 23

Extracted Entities

SonicWall flags SSLVPN flaw allowing firewall crashes

The full story

Extracted Entities

Attack Types (1)

CVEs (1)

Platforms (2)

Vulnerabilities (1)