CVE-2025-62000— BullWall Ransomware Containment 安全漏洞

BullWall Ransomware Containment incomplete file inspection

BullWall Ransomware Containment may not always detect an encrypted file. This issue affects a specific file inspection method that evaluates file content based on header bytes. An authenticated attacker could encrypt files, preserving the first four bytes and preventing this particular method from triggering. The affected product implements additional integrity-based detection mechanisms capable of identifying file corruption or encryption for some common file extensions independent of header bytes. As a result, this vulnerability does not represent a complete bypass of ransomware detection, but a limitation of one detection method when evaluated independently. Versions 4.6.0.0, 4.6.0.6, 4.6.0.7, and 4.6.1.4 are affected. Other versions may also be affected. BullWall plans to improve detection method documentation.

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H

缺失要素致使对比不完全

BullWall Ransomware Containment 安全漏洞

BullWall Ransomware Containment是丹麦BullWall公司的一个勒索软件防护软件。 BullWall Ransomware Containment 4.6.0.0版本、4.6.0.6版本、4.6.0.7版本和4.6.1.4版本存在安全漏洞，该漏洞源于文件检查不完整，可能导致绕过检测。

N/A

N/A