CVE-2025-62003
Authentication Bypass Window in BullWall Server Intrusion Protection
Publication date: 2025-12-18
Last updated on: 2025-12-18
Assigner: Cybersecurity and Infrastructure Security Agency (CISA) U.S. Civilian Government
Description
Description
CVSS Scores
EPSS Scores
| Probability: | |
| Percentile: |
Meta Information
Affected Vendors & Products
| Vendor | Product | Version / Range |
|---|---|---|
| bullwall | server_intrusion_protection | 4.6.0.0 |
| bullwall | server_intrusion_protection | 4.6.0.6 |
| bullwall | server_intrusion_protection | 4.6.0.7 |
| bullwall | server_intrusion_protection | 4.6.1.4 |
Helpful Resources
Exploitability
| CWE ID | Description |
|---|---|
| CWE-367 | The product checks the state of a resource before using that resource, but the resource's state can change between the check and the use in a way that invalidates the results of the check. |
Attack-Flow Graph
AI Powered Q&A
Can you explain this vulnerability to me?
This vulnerability exists in BullWall Server Intrusion Protection where there is a noticeable delay before the Multi-Factor Authentication (MFA) check occurs when connecting via Remote Desktop Protocol (RDP). During this delay window, a remote authenticated attacker who already has administrative privileges can potentially bypass detection by the system.
How can this vulnerability impact me? :
The vulnerability can allow a remote attacker with administrative privileges to bypass detection during the delay before MFA verification when connecting via RDP. This could lead to unauthorized actions or compromise of the system's security monitoring, increasing the risk of intrusion or malicious activity going unnoticed.