critical9.8
CVE-2025-40604
Download of Code Without Integrity Check Vulnerability in the SonicWall Email Security appliance loads root filesystem images without verifying signatures, all…
Impact
Download of Code Without Integrity Check Vulnerability in the SonicWall Email Security appliance loads root filesystem images without verifying signatures, allowing attackers with VMDK or datastore access to modify system files and gain persistent arbitrary code execution.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Sonicwall | Email Security Appliance 5000 Firmware | through 10.0.33.8195 |
| Sonicwall | Email Security Appliance 5050 Firmware | through 10.0.33.8195 |
| Sonicwall | Email Security Appliance 7000 Firmware | through 10.0.33.8195 |
| Sonicwall | Email Security Appliance 7050 Firmware | through 10.0.33.8195 |
| Sonicwall | Email Security Appliance 9000 Firmware | through 10.0.33.8195 |