CVE-2025-40604
Download of Code Without Integrity Check Vulnerability in the SonicWall Email Security appliance loads root filesystem images without verifying signatures, allowing attackers with VMDK or datastore access to modify system files and gain persistent arbitrary code execution.
| Software | From | Fixed in |
|---|---|---|
| sonicwall / email_security_appliance_5000_firmware | - | 10.0.33.8195.x |
| sonicwall / email_security_appliance_5050_firmware | - | 10.0.33.8195.x |
| sonicwall / email_security_appliance_7000_firmware | - | 10.0.33.8195.x |
| sonicwall / email_security_appliance_7050_firmware | - | 10.0.33.8195.x |
| sonicwall / email_security_appliance_9000_firmware | - | 10.0.33.8195.x |
Deep Security Visibility Without the Complexity
SynScan provides clear, real-time security insights so you can monitor your attack surface, spot risks early, and act fast—without extra complexity.
- No setup fees
- 5-min deployment
- Cancel anytime