SonicWall Email Security Download of Code Without Integrity Check Vulnerability

A vulnerability allowing the download of code without integrity verification has been identified in the SonicWall Email Security appliance. This issue affects versions through 10.0.33.8195 on the ES Appliance 5000, 5050, 7000, 7050, 9000, as well as VMWare and Hyper-V deployments. The vulnerability arises because the appliance loads root filesystem images without verifying their signatures. As a result, attackers with access to VMDK files or the datastore can modify system files, leading to persistent arbitrary code execution.

Impact

Exploitation of this vulnerability allows for persistent arbitrary code execution on the affected system.

Remediation

Users are advised to upgrade to SonicWall Email Security versions 10.0.34.8215, 10.0.34.8223 or higher. Instructions for upgrading can be found in the SonicWall PSIRT advisory SNWLID-2025-0018.