SonicWall Products Security Restriction Bypass Vulnerability

Release Date: 16 May 2025

RISK: Medium Risk

TYPE: Operating Systems - Networks OS

A vulnerability was identified in SonicWall Products.  A remote attacker could exploit this vulnerability to trigger security restriction bypass on the targeted system.

 

---

Impact

• Security Restriction Bypass

---

System / Technologies affected

• SonicWall SMA 1000 Series 12.4.3-02925 (platform-hotfix) and earlier versions

---

Solutions

Before installation of the software, please visit the vendor web-site for more details.

 

Apply fixes issued by the vendor:

• https://www.sonicwall.com/support/notices/product-notice-sma-1000-series-affected-by-encoded-url-ssrf-vulnerability/250513120756710

---

Vulnerability Identifier

• CVE-2025-40595

---

Source

• SonicWall

---

Related Link

• https://www.sonicwall.com/support/notices/product-notice-sma-1000-series-affected-by-encoded-url-ssrf-vulnerability/250513120756710