PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

[CVE-2025-32818] SonicWall Sonicos Versions 7.1.x and 8.0.x

bishopfox.com | blog | CVE-2025-32818 | #denial-of-service | #vulnerability | #firewall | #sonicwall | #cve-2025-32818 | #ssl-vpn
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

Bishop Fox found an unauthenticated DoS in SonicWall's SSL VPN (CVE-2025-32818): crafted API requests crash and reboot NSv appliances, taking the VPN offline. Patch to 7.2.0/8.0.1 or disable it.
CVE
CVE-2025-32818
Published
Collected

Related coverage

vulnerability · bishopfox.com
SonicWall-CVE-2024-53704: Exploit Details
Bishop Fox explains its CVE-2024-53704 exploit: unauthenticated attackers can hijack active SSL VPN sessions on unpatched SonicWall firewalls and open tunnels without the victim's password. Patch now.
vulnerability · bishopfox.com
SonicWall CVE-2024-53704: SSL VPN Session Hijacking
Exploit details for CVE-2024-53704: Bishop Fox walks through the reverse engineering behind the SSL VPN session-hijacking flaw in unpatched SonicWall devices and urges January 2025 patches.
vulnerability · bishopfox.com
It’s 2024 and Over 178,000 SonicWall Firewalls are Publicly Exploitable
Bishop Fox found 178,637 of 233,984 internet-exposed SonicWall NGFW devices (76%) vulnerable to CVE-2022-22274 and CVE-2023-0656, unauthenticated DoS issues sharing one root cause; upgrade urged.
blog · bishopfox.com
Traefik | Version Through 3.7.11
Bishop Fox found that Traefik's request read timeout is not applied to HTTP/3, letting unauthenticated clients hold upstream connections open indefinitely; releases since 2.8.2 are affected.
blog · bishopfox.com
Cracking Firmware with Claude: Senior-Level Skill, Junior-Level Autonomy
Bishop Fox gave Claude Code an encrypted SonicWall firmware image; it traced the SWI decryption, rebuilt the Vault master key from Shamir shares and recovered the RSA key, senior-level work.
blog · bishopfox.com
Arista NextGen Firewall XSS to RCE Chain
Bishop Fox confirms all three Arista NGFW bugs (CVE-2025-6980/6979/6978) are exploitable and patches incomplete: XSS chains to RCE with victim interaction; disable the captive portal until fixes ship.
Back