CVE-2025-40604

critical · 9.8

Download of Code Without Integrity Check Vulnerability in the SonicWall Email Security appliance loads root filesystem images without verifying signatures, allowing attackers with VMDK or datastore access to modify system files and gain persistent arbitrary code execution.

9.8

CVSS

0.2%

EPSS (exploit prob.)

9th

EPSS percentile

2025-11-20

Published

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weaknesses

CWE-494

Affected products

Vendor	Product	Affected versions
sonicwall	email_security_appliance_5000_firmware	<= 10.0.33.8195
sonicwall	email_security_appliance_5000	all versions
sonicwall	email_security_appliance_5050_firmware	<= 10.0.33.8195
sonicwall	email_security_appliance_5050	all versions
sonicwall	email_security_appliance_7000_firmware	<= 10.0.33.8195
sonicwall	email_security_appliance_7000	all versions
sonicwall	email_security_appliance_7050_firmware	<= 10.0.33.8195
sonicwall	email_security_appliance_7050	all versions
sonicwall	email_security_appliance_9000_firmware	<= 10.0.33.8195
sonicwall	email_security_appliance_9000	all versions

Check a specific version with /api/v1/cve/match.

References

https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2025-0018

Query this programmatically:

curl https://evil-db.io/api/v1/cve/CVE-2025-40604