ZeroHour
DashboardNewsCVEsExploitsIncidentsAIBriefAnalyticsEntitiesWatchlistIOCsAsk the feedSourcesFeeds & APIKiosk mode

CVE-2025-40605

—
CVSS 3.1
5.3 medium
EPSS
<1%p26
Published
()
Modified
Description

A Path Traversal vulnerability has been identified in the Email Security appliance allows an attacker to manipulate file system paths by injecting crafted directory-traversal sequences (such as ../) and may access files and directories outside the intended restricted path.

Vendors
sonicwall
Products
email security appliance 5000 firmware, email security appliance 5050 firmware, email security appliance 7000 firmware, email security appliance 7050 firmware, email security appliance 9000 firmware
Weakness
CWE-23
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
NVD CVE.org GitHub PoCs EPSS (0.3%)

In the news

No ingested article mentions this CVE yet.