SonicWall SonicOS: CVE-2025-40601: SonicOS SSLVPN Pre-Auth Stack-Based Buffer Overflow Vulnerability

A Stack-based buffer overflow vulnerability in the SonicOS SSLVPN service allows a remote unauthenticated attacker to cause Denial of Service (DoS), which could cause an impacted firewall to crash. SonicWall PSIRT is not aware of active exploitation in the wild. No reports of a PoC have been made public and malicious use of this vulnerability has not been reported to SonicWall. And SonicWall strongly urges organizations using impacted SonicWall firewalls listed below to follow the provided guidance. NOTE: This vulnerability ONLY impacts the SonicOS SSLVPN interface or service if enabled on the firewall.