Description
Use of Externally-Controlled Format String vulnerability in the SonicOS SSL VPN interface allows a remote unauthenticated attacker to cause service disruption.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| SonicWall | SonicOS | 7.2.0-7015 and older versions | — |
Advisories 2
- NCSC-2025-0239 Kwetsbaarheid verholpen in SonicWall SonicOS NCSC-NL (Netherlands) · Jul 31, 2025
- WID-SEC-2025-1670 SonicWall SSL-VPN SonicOS Gen7 Firewall: Schwachstelle ermöglicht Denial of Service BSI CERT-Bund (WID) · Jul 29, 2025
References
- https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2025-0013 vendor-advisory