CVE-2025-40601: Buffer Overflow
Published Nov 20, 2025
·Updated
A Stack-based buffer overflow vulnerability in the SonicOS SSLVPN service allows a remote unauthenticated attacker to cause Denial of Service (DoS), which could cause an impacted firewall to crash.
Affected Software
34 affected components
All of the following
SonicWall SonicOS>=7.1.1-7040<7.3.1-7013
Any of the following
SonicWall Nsa 2700
SonicWall Nsa 3700
SonicWall Nsa 4700
SonicWall Nsa 5700
SonicWall Nsa 6700
SonicWall Nssp 10700
SonicWall Nssp 11700
SonicWall Nssp 13700
SonicWall Nssp 15700
SonicWall Nsv270
SonicWall Nsv470
SonicWall Nsv870
SonicWall Tz270
SonicWall Tz270w
SonicWall Tz370
SonicWall Tz370w
SonicWall Tz470
SonicWall Tz470w
SonicWall Tz570
SonicWall Tz570p
SonicWall Tz570w
SonicWall Tz670
All of the following
SonicWall SonicOS<8.0.3-8011
Any of the following
SonicWall Nsa 2800
SonicWall Nsa 3800
SonicWall Nsa 4800
SonicWall Nsa 5800
SonicWall Tz280
SonicWall Tz380
SonicWall Tz480
SonicWall Tz580
SonicWall Tz680
SonicWall TZ80
Event History
Nov 20, 2025
CVE Published
via MITRE·12:26 PM
Data Sourced
via MITRE·12:26 PM
DescriptionWeakness
Data Sourced
via NVD·03:17 PM
DescriptionSeverityWeaknessAffected Software
News Published
via BleepingComputer·03:56 PM
News Published
via BleepingComputer·03:57 PM
Frequently Asked Questions
1
What is the severity of CVE-2025-40601?
The severity of CVE-2025-40601 is critical as it can be exploited to cause a Denial of Service.
2
How do I fix CVE-2025-40601?
To fix CVE-2025-40601, update to the latest version of SonicOS that addresses the vulnerability.
3
Who is affected by CVE-2025-40601?
CVE-2025-40601 affects specific versions of SonicWall SonicOS running on certain firewall models.
4
What type of vulnerability is CVE-2025-40601?
CVE-2025-40601 is a stack-based buffer overflow vulnerability in the SonicOS SSLVPN service.
5
Can CVE-2025-40601 be exploited remotely?
Yes, CVE-2025-40601 can be exploited by a remote unauthenticated attacker.