CVE Catalog
CVE-2025-40604
CriticalSummary
The SonicWall Email Security appliance loads root filesystem images without verifying signatures, allowing attackers with VMDK or datastore access to modify system files and gain persistent arbitrary code execution.
Risk Assessment
An attacker can gain full control of the appliance, leading to system integrity compromise and potential lateral movement.
Recommendation
Apply vendor updates and restrict access to VMDK and datastores.
Original NVD description (English source)
Download of Code Without Integrity Check Vulnerability in the SonicWall Email Security appliance loads root filesystem images without verifying signatures, allowing attackers with VMDK or datastore access to modify system files and gain persistent arbitrary code execution.