CVE-2025-40604

🗓️ 20 Nov 2025 12:17:14Reported by sonicwallType

SonicWall Email Security loads unsigned root images, enabling persistent code execution with VMDK datastore access.

Reporter	Title	Published	Views	Family All 10
Circl	CVE-2025-40604	20 Nov 202514:00	–	circl
CNNVD	SonicWALL Email Security 安全漏洞	20 Nov 202500:00	–	cnnvd
Cvelist	CVE-2025-40604	20 Nov 202512:17	–	cvelist
EUVD	EUVD-2025-198274	20 Nov 202515:30	–	euvd
NCSC	Vulnerabilities fixed in SonicWall Email Security appliances	21 Nov 202516:06	–	ncsc
NVD	CVE-2025-40604	20 Nov 202515:17	–	nvd
Positive Technologies	PT-2025-47567	19 Nov 202500:00	–	ptsecurity
RedhatCVE	CVE-2025-40604	21 Nov 202512:31	–	redhatcve
SonicWall	SonicWall Email Security Affected By Multiple Vulnerabilities	19 Nov 202511:42	–	sonicwall
Vulnrichment	CVE-2025-40604	20 Nov 202512:17	–	vulnrichment

NVD

Vulners

Node

sonicwall email_security_appliance_5000_firmwareRange≤10.0.33.8195

AND

sonicwall email_security_appliance_5000Match-

Node

sonicwall email_security_appliance_5050_firmwareRange≤10.0.33.8195

AND

sonicwall email_security_appliance_5050Match-

Node

sonicwall email_security_appliance_7000_firmwareRange≤10.0.33.8195

AND

sonicwall email_security_appliance_7000Match-

Node

sonicwall email_security_appliance_7050_firmwareRange≤10.0.33.8195

AND

sonicwall email_security_appliance_7050Match-

Node

sonicwall email_security_appliance_9000_firmwareRange≤10.0.33.8195

AND

sonicwall email_security_appliance_9000Match-

[
  {
    "defaultStatus": "unknown",
    "platforms": [
      "Linux",
      "Windows"
    ],
    "product": "Email Security",
    "vendor": "SonicWall",
    "versions": [
      {
        "status": "affected",
        "version": "10.0.33.8195 and earlier versions"
      }
    ]
  }
]

Source	Link
psirt	www.psirt.global.sonicwall.com/vuln-detail/SNWLID-2025-0018

12 Dec 2025 15:44Current

7.7High risk

Vulners AI Score7.7

CVSS 3.16.5 - 9.8

EPSS0.00025

SSVC

CWE-494