VulnSocial

CVE-2025-40601Active Exploitation(sonicwall / nsa_2700)

MEDIUMCVSS 7.5 · HIGH

Exploitation ongoing with high activity in latest observed window (1 mentions)

Immediate actions

  • Prioritize remediation for sonicwall nsa_2700 systems immediately
  • Assume compromise if assets are exposed
  • Track advisory updates for patch or workaround availability

Recommended action window: Immediate (within 24h)

NVD description

A Stack-based buffer overflow vulnerability in the SonicOS SSLVPN service allows a remote unauthenticated attacker to cause Denial of Service (DoS), which could cause an impacted firewall to crash.

sonicwall CVEsBack to dashboard
4.0/ 10 priority

Sources & remediation

Vendor / third-party advisories
Weakness type (CWE)
CWE-121

Priority

MEDIUM

Exploitation

ACTIVE

PoC

NONE

Patch

NONE

Momentum

NONE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

  • nsa_2700
  • nsa_2800
  • nsa_3700
  • nsa_3800

Threat summary

  • Active exploitation appears in 1 classified signals
  • 1 mentions across 1 observed day

What's happening

  • Active exploitation reported across 1 signal
  • 1 total mentions across 1 day

Affected systems

Vendors
sonicwall
Products
nsa_2700nsa_2800nsa_3700nsa_3800nsa_4700nsa_4800nsa_5700nsa_5800nsa_6700nssp_10700

1 version affected across 33 products

Deep dive

Activity timeline1 mentions / 1d
00111Mentions · 2026-02-13: 1Active Exploitation · 2026-02-13: 102-13
Signal classification1 categories
Active Exploitation
1100.0%
Full discourse1 post
  • Nye Technology Solutions@NyeTechnology
    Active Exploitation

    Recent reports show the Akira ransomware is targeting business mergers by hiding in unpatched VPNs (CVE-2025-40601). When you acquire the company, you acquire the malware. Always audit the IT stack before the handshake. We can help. 🤝 #CyberSecurity #FremontNE #BusinessTips https://t.co/OfXEyZml5j

    Post summary

    Recent reports suggest Akira ransomware is actively exploiting unpatched VPNs during business mergers, but no specific exploit code or patch is disclosed.

    0000050
    3 followersView on X
CPE platform detail33 entries

33 of 33 entries

PartVendorProductVersionTarget SWTarget HW
HWsonicwallnsa_2700---
HWsonicwallnsa_2800---
HWsonicwallnsa_3700---
HWsonicwallnsa_3800---
HWsonicwallnsa_4700---
HWsonicwallnsa_4800---
HWsonicwallnsa_5700---
HWsonicwallnsa_5800---
HWsonicwallnsa_6700---
HWsonicwallnssp_10700---
HWsonicwallnssp_11700---
HWsonicwallnssp_13700---
HWsonicwallnssp_15700---
HWsonicwallnsv270---
HWsonicwallnsv470---
HWsonicwallnsv870---
OSsonicwallsonicos---
HWsonicwalltz270---
HWsonicwalltz270w---
HWsonicwalltz280---
HWsonicwalltz370---
HWsonicwalltz370w---
HWsonicwalltz380---
HWsonicwalltz470---
HWsonicwalltz470w---
HWsonicwalltz480---
HWsonicwalltz570---
HWsonicwalltz570p---
HWsonicwalltz570w---
HWsonicwalltz580---
HWsonicwalltz670---
HWsonicwalltz680---
HWsonicwalltz80---

Explore more

Back to dashboardsonicwall CVEsnsa_2700 vulnerabilities