A Vulnerability in SonicOS Could Allow for Denial of Service (DoS)

**CVE-2025-40601 — SonicOS SSLVPN stack-based buffer overflow**: A vulnerability in the SonicOS SSLVPN service allows a remote unauthenticated attacker to trigger a denial-of-service condition that may crash affected firewalls. SonicWall PSIRT reports no known active exploitation or public proof-of-concept, and the vulnerability only affects the SSLVPN interface when enabled.