HIGH🇵🇱 Wersja polska

CVE-2025-62004

CVSS 7.7v4.0pub. 2025-12-18upd. 2026-01-15

BullWall Server Intrusion Protection (SIP) services are initialized after login services during system startup. A local, authenticated attacker can log in after boot and before SIP MFA is running. The SIP services do not retroactively enforce MFA or disconnect sessions that were not subject to SIP MFA. Versions 4.6.0.0, 4.6.0.6, 4.6.0.7, and 4.6.1.4 are affected. Other versions mayy also be affected. BullWall plans to improve detection method documentation.

CVSS Vector
CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

  • Bullwall Server Intrusion Protection

    APP
    Bullwall
    4.6.0.04.6.0.64.6.0.74.6.1.4
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
CWE
References

Related vulnerabilities

CVE-2025-62003HIGH7.7same product

BullWall Server Intrusion Protection has a noticeable configuration-dependent delay before the MFA check for R...

CVE-2025-62001HIGH8.7same vendor

BullWall Ransomware Containment supports configurable file and directory exclusions such as '$RECYCLE.BIN' to ...

CVE-2025-62000MEDIUM6.9same vendor

BullWall Ransomware Containment może nie zawsze wykryć zaszyfrowany plik. Problem dotyczy specjalnej metody in...

CVE-2025-62002MEDIUM5.3same vendor

BullWall Ransomware Containment określa liczbę zmodyfikowanych plików do wyzwolenia detekcji. Uwierzytelniony ...