Critical · published November 20, 2025
⚠️ A sneaky code download happens without a safety check! If you've got access to the VMDK or datastore, you could modify system files on SonicWall Email Security appliances, and that's no good! Think of it like a restaurant that allows the delivery person to drop off food without checking if the order matches what was sent. If they’re not verifying what’s being brought in, a mischievous delivery person could swap in something harmful instead! An attacker with access could tamper with system files, leading to persistent arbitrary code execution. This means they could essentially control the appliance, potentially leading to data breaches or unauthorized access to sensitive information. It's a medium severity risk, but it could have serious implications if exploited!
Think of it like a restaurant that allows the delivery person to drop off food without checking if the order matches what was sent. If they’re not verifying what’s being brought in, a mischievous delivery person could swap in something harmful instead! This vulnerability allows SonicWall Email Security appliances to download root filesystem images without verifying their signatures, making it possible for attackers to modify crucial system files when they have datastore access.
An attacker with access could tamper with system files, leading to persistent arbitrary code execution. This means they could essentially control the appliance, potentially leading to data breaches or unauthorized access to sensitive information. It's a medium severity risk, but it could have serious implications if exploited! To protect your systems, ensure you update the SonicWall Email Security appliance to the latest version that includes integrity checks for downloads. Audit your access controls and limit who has VMDK or datastore access. Regularly review your security settings to guard against unauthorized access. You've got this! By taking these steps, you’ll strengthen your defenses and keep your systems safe! 🛡️
| Product | Versions | Fixed in |
|---|---|---|
| sonicwall/email_security_appliance_5000_firmware | ≤ 10.0.33.8195 | — |
| sonicwall/email_security_appliance_5050_firmware | ≤ 10.0.33.8195 | — |
| sonicwall/email_security_appliance_7000_firmware | ≤ 10.0.33.8195 | — |
| sonicwall/email_security_appliance_7050_firmware | ≤ 10.0.33.8195 | — |
| sonicwall/email_security_appliance_9000_firmware | ≤ 10.0.33.8195 | — |