SonicWall, Inc.

SonicWall is a broadly represented vendor of network security appliances, including firewalls and unified threat management platforms, with a large installed base spanning enterprise and small-business deployments worldwide. Vulnerabilities affecting the vendor skew toward serious outcomes, with an elevated share reaching critical severity and a strong tendency to acquire public exploit code; a moderate share have been confirmed as exploited in the wild and cataloged by CISA. The exposure concentrates in flagship products such as SonicOS and the TZ series firewall line and recurs through memory-safety and authentication weakness classes including stack-based and classic buffer overflows, out-of-bounds writes, cross-site scripting, and improper authentication—patterns endemic to firmware-based network appliances that parse untrusted traffic and manage administrative access. Defenders should prioritize patching internet-facing SonicWall devices and inventory end-of-life models, as their perimeter role and persistent deployment make them high-value targets for initial access and lateral pivoting. Current exploitation activity, severity counts, and KEV status are shown alongside this summary.