CVE-2025-40600

Use of Externally-Controlled Format String vulnerability in the SonicOS SSL VPN interface allows a remote unauthenticated attacker to cause service disruption...

CVE-2025-40600

The SonicOS operating system is vulnerable to a Use of Externally-Controlled Format String vulnerability within its SSL VPN interface . A remote, unauthenticated attacker can exploit this flaw to cause a service disruption or service failure . SonicWall has released a new version to address this ...

SonicOS Use of Externally-Controlled Format String Vulnerability

Use of Externally-Controlled Format String vulnerability in the SonicOS SSL VPN interface allows a remote unauthenticated attacker to cause service disruption.SonicWall strongly advises users of the SonicWall firewall products to upgrade to the mentioned fixed release version to address this...