SonicWall Patches Two Vulnerabilities in Email Security Appliances, Including Code Execution Flaw (CVE-2025-40604)

SonicWall released security updates for its Email Security appliances to address two flaws, including a code execution vulnerability tracked as CVE-2025-40604 and a path traversal issue, CVE-2025-40605. The most severe flaw, CVE-2025-40604, is rated 7.2 on the CVSS scale and is described as a download of code without integrity check, affecting both physical and virtual ES appliances, including VMware and Hyper-V deployments.

According to the advisory, the vulnerability allows the appliance to load root filesystem images without verifying signatures, enabling attackers with VMDK or datastore access to modify system files and gain persistent arbitrary code execution. The second flaw could enable file system path manipulation via crafted directory-traversal sequences and, depending on deployment, may permit reconnaissance, configuration exposure, or unauthorized access to sensitive data. SonicWall urges all customers to upgrade immediately, noting fixed versions for Email Security appliances are 10.0.34.8215, 10.0.34.8223 and higher.