HIGH🇵🇱 Wersja polska

CVE-2025-62004

CVSS 7.7v4.0pub. 2025-12-18upd. 2026-01-15

BullWall Server Intrusion Protection (SIP) services are initialized after login services during system startup. A local, authenticated attacker can log in after boot and before SIP MFA is running. The SIP services do not retroactively enforce MFA or disconnect sessions that were not subject to SIP MFA. Versions 4.6.0.0, 4.6.0.6, 4.6.0.7, and 4.6.1.4 are affected. Other versions mayy also be affected. BullWall plans to improve detection method documentation.

CVSS Vector
CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

  • Bullwall Server Intrusion Protection

    APP
    Bullwall
    4.6.0.04.6.0.64.6.0.74.6.1.4
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
CWE
References

Related vulnerabilities

CVE-2025-62003HIGH7.7ten sam produkt

BullWall Server Intrusion Protection has a noticeable configuration-dependent delay before the MFA check for R...

CVE-2025-62001HIGH8.7ten sam vendor

BullWall Ransomware Containment supports configurable file and directory exclusions such as '$RECYCLE.BIN' to ...

CVE-2025-62000MEDIUM6.9ten sam vendor

BullWall Ransomware Containment may not always detect an encrypted file. This issue affects a specific file in...

CVE-2025-62002MEDIUM5.3ten sam vendor

BullWall Ransomware Containment considers the number of files modified to trigger detection. An authenticated ...