PT-2025-47567 · Sonicwall · Sonicwall Email Security

Brian Mariani · Published 2025-11-19 · Updated 2025-12-29 · CVE-2025-40604

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions SonicWall Email Security Appliance (affected versions not specified)

Description The SonicWall Email Security appliance downloads root filesystem images without verifying signatures. This allows attackers with VMDK or datastore access to modify system files and potentially gain persistent arbitrary code execution.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Weakness Enumeration

CWE-494

Related Identifiers

BDU:2025-14679

CVE-2025-40604

Affected Products

Sonicwall Email Security

References · 11

• https://bdu.fstec.ru/vul/2025-14679 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2025-40604 · Security Note
• https://osv.dev/vulnerability/CVE-2025-40604 · Vendor Advisory
• https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2025-0018 · Vendor Advisory
• https://twitter.com/DarkWebInformer/status/1991586305851998250 · Twitter Post
• https://t.me/pentestingnews/71142 · Telegram Post
• https://twitter.com/CVEnew/status/1991494193504563213 · Twitter Post
• https://t.me/cveNotify/145621 · Telegram Post
• https://twitter.com/VulmonFeeds/status/1991576057187537283 · Twitter Post
• https://twitter.com/Komodosec/status/2005473908183732287 · Twitter Post
• https://t.me/true_secator/7647 · Telegram Post