Bleepingcomputer

SonicWall SonicOS Vulnerability Allows Remote DoS Attacks

First seen 20 Nov 2025, 20:18 UTC • Bleepingcomputer

+4 •44.6

Article Content

Include sub-articles 1 / 1

Browse articles

ThreatCluster

SonicWall has issued a security advisory regarding a critical vulnerability in its SonicOS operating system, identified as CVE-2025-40601. This high-severity flaw affects Gen7 and Gen8 hardware and virtual appliances, allowing remote, unauthenticated attackers to exploit a stack-based buffer overflow in the SSLVPN service, resulting in a denial of service (DoS) condition.

How this analysis works

Continue Reading

Critical SonicWall SMA1000 Vulnerabilities Under Active Exploitation Akira Ransomware Group Targets Critical Infrastructure, Extracts $42 Million Persistent Firestarter Malware Targets Cisco Firepower Devices in US Agencies Exploitation of Remote Services in Cyber Attacks CVE-2024-40766 Exploited by Ransomware Groups Targeting SonicWall Firewalls Ransomware Group Targets SonicWall Gen 7 Firewalls via CVE-2024-40766

SonicWall SonicOS Vulnerability Allows Remote DoS Attacks

Article Content

More articles in this cluster

Attack Flow

Defensive Countermeasures

Extracted Entities

Continue Reading