CVE-2025-32818

{"id": "CVE-2025-32818", "cveTags": [], "metrics": {"cvssMetricV31": [{"type": "Secondary", "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 7.5, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "NONE"}, "impactScore": 3.6, "exploitabilityScore": 3.9}]}, "published": "2025-04-23T20:15:43.853", "references": [{"url": "https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2025-0009", "source": "PSIRT@sonicwall.com"}], "vulnStatus": "Awaiting Analysis", "weaknesses": [{"type": "Primary", "source": "PSIRT@sonicwall.com", "description": [{"lang": "en", "value": "CWE-476"}]}], "descriptions": [{"lang": "en", "value": "A Null Pointer Dereference vulnerability in the SonicOS SSLVPN Virtual office interface allows a remote, unauthenticated attacker to crash the firewall, potentially leading to a Denial-of-Service (DoS) condition."}, {"lang": "es", "value": "Una vulnerabilidad de desreferencia de puntero nulo en SonicOS SSLVPN Virtual office interface permite que un atacante remoto no autenticado bloquee el firewall, lo que podr\u00eda generar una condici\u00f3n de denegaci\u00f3n de servicio (DoS)."}], "lastModified": "2025-04-29T13:52:47.470", "sourceIdentifier": "PSIRT@sonicwall.com"}