SonicWall Patches High-Severity Flaws in Firewalls, Email Security Appliance

SonicWall has released fixes for high‑severity vulnerabilities affecting Gen7 and Gen8 firewalls and Email Security appliances.

A stack‑based buffer overflow in the SonicOS SSL VPN service could be exploited remotely, without authentication, to cause a denial‑of‑service condition and device crashes, tracked as CVE‑2025‑40601 (CVSS 7.2); the issue affects only firewalls with the SonicOS SSLVPN interface or service enabled, and was addressed in SonicOS versions 7.3.1‑7013 and 8.0.2‑8011, while Gen6 devices and the SMA 1000/100 series are not affected.

For Email Security appliances, two high‑severity flaws were fixed: CVE‑2025‑40604 (CVSS 7.2) involves failure to verify signatures of loaded root filesystem images, and CVE‑2025‑40605 (CVSS 4.9) is a path traversal issue enabling manipulation of file system paths; fixes were issued for appliances including 5000, 5050, 7000, 7050, 9000, VMware, and Hyper‑V with version 10.0.34.8215. In the interim, customers are advised to limit SonicOS SSL VPN access to trusted sources and disable access from untrusted origins.