CVE-2025-32818CWE-476

A Null Pointer Dereference vulnerability in the SonicOS SSLVPN Virtual office interface allows a remote, unauthenticated attacker to crash the firewall…

High · published April 23, 2025

CVSS v3.1
7.5
EPSS
1%
Percentile
57.0
In the wild
Unconfirmed
What it is

A Null Pointer Dereference vulnerability in the SonicOS SSLVPN Virtual office interface allows a remote, unauthenticated attacker to crash the firewall, potentially leading to a Denial-of-Service (DoS) condition.

The record
Technical detail
CVSS v3.1
7.5 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.00827 · 57.0th percentile
Weakness
CWE-476 · NULL Pointer Dereference
Published
2025-04-23T19:24Z
EPSS history
Timeline
  • 23 APR 19:24Z
    A Null Pointer Dereference vulnerability in the SonicOS SSLVPN Virtual office interface allows a remote, unauthenticated attacker to crash the firewall…
    cvelistv5