Server Intrusion Protection Bypassed in BullWall Product

CVE-2025-62004

What is CVE-2025-62004?

An authentication vulnerability in BullWall's Server Intrusion Protection services allows an authenticated attacker with administrative privileges to log in post-boot and bypass multi-factor authentication (MFA). The SIP service fails to enforce session validation or disconnect unauthorized sessions retroactively, exposing the system to potential exploitation. Versions 4.6.0.0, 4.6.0.6, 4.6.0.7, and 4.6.1.4 are confirmed affected, raising concerns about security in both prior and subsequent versions.

References