CVE-2025-40601 - AskarLabs CVE Database

CVE-2025-40601

Vendor Sonicwall

Product SonicOS

Weakness CWE-121

Published November 20, 2025

Last update November 20, 2025

View on NVD All CVEs

CVSS base score

—

What the vulnerability does

01Description

A Stack-based buffer overflow vulnerability in the SonicOS SSLVPN service allows a remote unauthenticated attacker to cause Denial of Service (DoS), which could cause an impacted firewall to crash.

Key dates

02Disclosure timeline

November 20, 2025 CVE published

November 20, 2025 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2025-40601 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/121.html

Identifiers

CVE CVE-2025-40601

CWE CWE-121

Affected versions

Vendor Sonicwall

Product SonicOS

Affected 7.3.0-7012 and older versions

Vendor Sonicwall

Product SonicOS

Affected 8.0.2-8011 and older versions