Ransomware Containment Vulnerability in BullWall Products

CVE-2025-62002

What is CVE-2025-62002?

The BullWall Ransomware Containment product is vulnerable due to its reliance on tracking file modifications for detection purposes. An authenticated attacker could exploit this vulnerability by encrypting a single, large file which fails to trigger any alarms, effectively bypassing the containment measures that the software is designed to enforce. Affected versions include 4.6.0.0, 4.6.0.6, 4.6.0.7, and 4.6.1.4, with the potential for other versions to also be impacted. This issue highlights the need for enhanced monitoring and detection strategies to prevent ransomware attacks.

References