Security Alert (A25-11-21): Multiple Vulnerabilities in SonicWall Products

Description:

SonicWall released security advisories to address multiple vulnerabilities in SonicWall systems. An attacker could exploit these vulnerabilities by sending specially crafted requests to an affected system.

Affected Systems:

• SonicWall Email Security Appliance versions prior to 10.0.33.8195
• SonicWall Gen7 Hardware Firewalls running SonicOS versions prior to 7.3.0-7012 (7.0.1 branch is not affected)
• SonicWall Gen7 Virtual Firewalls (NSv) running SonicOS versions prior to 7.3.0-7012 (7.0.1 branch is not affected)
• SonicWall Gen8 Firewalls running SonicOS versions prior to 8.0.2-8011

For detailed information of the affected systems, please refer to the corresponding security advisories at vendor's website.

Impact:

Successful exploitation of the vulnerabilities could lead to remote code execution, denial of service, information disclosure or tampering on an affected system.

Recommendation:

Patches for affected systems are now available. Administrators of affected systems should follow the recommendations provided by the vendor and take immediate actions to mitigate the risk.

More Information:

• https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2025-0016
• https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2025-0018
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-40601
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-40604 (to CVE-2025-40605)