PT-2025-17667 · Sonicwall · Sonicos

Published 2025-04-23 · Updated 2025-04-29 · CVE-2025-32818

Positive Technologies (AI Summary)

CVSS v2.0

7.8

High

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions SonicOS versions 7.1.1-7040

Description A Null Pointer Dereference vulnerability in the SonicOS SSLVPN Virtual office interface allows a remote, unauthenticated attacker to crash the firewall, potentially leading to a Denial-of-Service (DoS) condition. Over 15,500 services are potentially affected.

Recommendations For SonicOS versions 7.1.1-7040, update the firmware to prevent potential DoS conditions. As a temporary workaround, consider restricting access to the SonicOS SSLVPN Virtual office interface until a patch is available.

Fix

DoS

NULL Pointer Dereference

Weakness Enumeration

CWE-476

Related Identifiers

BDU:2025-14515

CVE-2025-32818

Affected Products

Sonicos

References · 17

• https://nvd.nist.gov/vuln/detail/CVE-2025-32818 · Security Note
• https://bdu.fstec.ru/vul/2025-14515 · Security Note
• https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2025-0009 · Vendor Advisory
• https://t.me/purp_sec/570 · Telegram Post
• https://twitter.com/cybercronai/status/1915587054634762249 · Twitter Post
• https://twitter.com/HunterMapping/status/1915303754670489968 · Twitter Post
• https://twitter.com/dailytechonx/status/1915514837045764124 · Twitter Post
• https://twitter.com/the_yellow_fall/status/1915218478682038477 · Twitter Post
• https://t.me/cvetracker/22234 · Telegram Post
• https://twitter.com/TweetThreatNews/status/1915471948827578571 · Twitter Post
• https://twitter.com/syedaquib77/status/1915238648276242494 · Twitter Post
• https://twitter.com/CVEnew/status/1915127780393595309 · Twitter Post
• https://t.me/cvedetector/23623 · Telegram Post
• https://twitter.com/noperator/status/1916930464729780514 · Twitter Post
• https://twitter.com/Brandefense/status/1917187971867910294 · Twitter Post