critical9.8
CVE-2025-40600
Use of Externally-Controlled Format String vulnerability in the SonicOS SSL VPN interface allows a remote unauthenticated attacker to cause service disruption.
Impact
Use of Externally-Controlled Format String vulnerability in the SonicOS SSL VPN interface allows a remote unauthenticated attacker to cause service disruption.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Sonicwall | Sonicos | from 7.1.1-7040 before 7.3.0-7012 |