CVE-2024-40764: SonicWall SonicOS

High severity, CVSS 7.5. EPSS: 0.7% chance of exploitation in the next 30 days.

Heap-based buffer overflow vulnerability in the SonicOS IPSec VPN allows an unauthenticated remote attacker to cause Denial of Service (DoS).

Affected products

• SonicWall SonicOS: before 6.5.4.v-21s-rc2457 (fixed in 6.5.4.v-21s-rc2457); before 7.0.1-5161 (fixed in 7.0.1-5161); from 7.1.1-7040, before 7.1.1-7058 (fixed in 7.1.1-7058)

Published 2024-07-18. Last modified 2026-06-17.