CVE-2025-40600
critical · 9.8Use of Externally-Controlled Format String vulnerability in the SonicOS SSL VPN interface allows a remote unauthenticated attacker to cause service disruption.
9.8
CVSS
0.9%
EPSS (exploit prob.)
58th
EPSS percentile
2025-07-29
Published
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Weaknesses
CWE-134
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| sonicwall | sonicos | >= 7.1.1-7040, < 7.3.0-7012 |
| sonicwall | nsa_2700 | all versions |
| sonicwall | nsa_3700 | all versions |
| sonicwall | nsa_4700 | all versions |
| sonicwall | nsa_5700 | all versions |
| sonicwall | nsa_6700 | all versions |
| sonicwall | nssp_10700 | all versions |
| sonicwall | nssp_11700 | all versions |
| sonicwall | nssp_13700 | all versions |
| sonicwall | nssp_15700 | all versions |
| sonicwall | nsv270 | all versions |
| sonicwall | nsv470 | all versions |
| sonicwall | nsv870 | all versions |
| sonicwall | tz270 | all versions |
| sonicwall | tz270w | all versions |
| sonicwall | tz370 | all versions |
| sonicwall | tz370w | all versions |
| sonicwall | tz470 | all versions |
| sonicwall | tz470w | all versions |
| sonicwall | tz570 | all versions |
| sonicwall | tz570p | all versions |
| sonicwall | tz570w | all versions |
| sonicwall | tz670 | all versions |
Check a specific version with /api/v1/cve/match.
References
Query this programmatically:
curl https://evil-db.io/api/v1/cve/CVE-2025-40600