SonicWall SSLVPN Flaw: When Firewalls Decide to Take a Nap!
SonicWall is sounding the alarm on a SonicOS SSLVPN flaw that can crash Gen7 and Gen8 firewalls. This vulnerability, CVE-2025-40601, is a buffer overflow issue with a CVSS score of 7.5. SonicWall advises customers to patch ASAP unless you’re into unplanned firewall siestas.
Hot Take:
In an unexpected plot twist, SonicWall’s firewalls are playing a game of ‘Crash Bandicoot’ with cyber attackers. If there’s a silver lining, it’s that attackers are yet to exploit this flaw in the wild. Until then, SonicWall has entered ‘patch it like it’s hot’ mode to keep your firewalls from throwing a tantrum.
Key Points:
- SonicWall has identified a high-severity buffer overflow flaw in SonicOS SSLVPN, tracked as CVE-2025-40601, with a CVSS score of 7.5.
- The flaw allows for a denial-of-service (DoS) attack, leading to potential firewall crashes.
- Impact is confined to Gen7 and Gen8 hardware and virtual firewalls with the SSLVPN interface enabled.
- SonicWall urges immediate patching and suggests disabling SSLVPN or restricting access as interim measures.
- No active exploitation or public PoC (Proof of Concept) reports have surfaced yet.
Already a member? Log in here