7.5
High
CVE-2025-32818 A Null Pointer Dereference vulnerability in the SonicOS SSLVPN Virtual office interface allows a remote, unauthenticated…
Description
A Null Pointer Dereference vulnerability in the SonicOS SSLVPN Virtual office interface allows a remote, unauthenticated attacker to crash the firewall, potentially leading to a Denial-of-Service (DoS) condition.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| SonicOS 7.1 | 7.1.1-7040 → 7.1.3-7015 | No fix stated |
Other CVEs of SonicOS
The 75 CVEs of SonicOS →
CVE-2026-19703
A weak password hashing vulnerability has been identified on SonicOS virtual appliances, which in specific conditions…
5.1
Medium
CVE-2026-77709
A pre-authentication heap-based buffer overflow vulnerability has been identified in the SonicOS TACACS+…
5.9
Medium
CVE-2026-77708
A pre-authentication stack-based buffer overflow vulnerability has been identified in the SonicOS TACACS+ authentication…
5.9
Medium
CVE-2026-19868
SonicWall SonicOS SSLVPN Use of Single-factor Authentication Vulnerability
7.5
High