Skip to content

Known vulnerabilities in SonicWall SonicOS

Is your version affected?

CVE Summary Score Published
CVE-2025-40600 Use of Externally-Controlled Format String vulnerability in the SonicOS SSL VPN interface allows a remote… 9.8 Critical Jul 29, 2025
CVE-2024-12802 SSL-VPN MFA Bypass in SonicWALL SSL-VPN can arise in specific cases due to the separate handling of UPN (User… 9.1 Critical Jan 9, 2025
CVE-2024-40765 An Integer-based buffer overflow vulnerability in the SonicOS via IPSec allows a remote attacker in specific… 9.8 Critical Jan 9, 2025
CVE-2024-40762 Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG) in the SonicOS SSLVPN authentication token generator… 9.8 Critical Jan 9, 2025
CVE-2024-40766 Exploited SonicWall SonicOS Improper Access Control Vulnerability 9.3 Critical Aug 23, 2024
CVE-2024-22394 An improper authentication vulnerability has been identified in SonicWall SonicOS SSL-VPN feature, which in specific… 9.8 Critical Feb 8, 2024
CVE-2020-5135 Exploited SonicWall SonicOS Buffer Overflow Vulnerability 9.8 Critical Oct 12, 2020

Other SonicWall products