Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2025-40605

A Path Traversal vulnerability has been identified in the Email Security appliance allows an attacker to manipulate file system paths by injecting crafted directory-traversal sequences (such as ../) and may access files and directories outside the intended restricted path.

Published

2025-11-20T15:17:28.917

Last Modified

2025-12-12T15:43:42.043

Status

Analyzed

Source

[email protected]

Severity

CVSSv3.1: 5.3 (MEDIUM)

Weaknesses
  • Type: Secondary
    CWE-23
Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Operating System sonicwall email_security_appliance_5000_firmware ≤ 10.0.33.8195 Yes
Hardware sonicwall email_security_appliance_5000 - No
Operating System sonicwall email_security_appliance_5050_firmware ≤ 10.0.33.8195 Yes
Hardware sonicwall email_security_appliance_5050 - No
Operating System sonicwall email_security_appliance_7000_firmware ≤ 10.0.33.8195 Yes
Hardware sonicwall email_security_appliance_7000 - No
Operating System sonicwall email_security_appliance_7050_firmware ≤ 10.0.33.8195 Yes
Hardware sonicwall email_security_appliance_7050 - No
Operating System sonicwall email_security_appliance_9000_firmware ≤ 10.0.33.8195 Yes
Hardware sonicwall email_security_appliance_9000 - No
References