CVE-2025-62003— BullWall Server Intrusion Protection RDP MFA connection delay
Possible ATT&CK Techniques 1AI
T1078 · Valid AccountsGet alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2025-62003
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
BullWall Server Intrusion Protection RDP MFA connection delay
Source: CVE Program / CVE List V5
Vulnerability Description
BullWall Server Intrusion Protection has a noticeable configuration-dependent delay before the MFA check for RDP connections. A remote, authenticated attacker can potentially bypass detection during this delay. Versions 4.6.0.0, 4.6.0.6, 4.6.0.7, and 4.6.1.4 are affected. Other versions may also be affected.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
Source: CVE Program / CVE List V5
Vulnerability Type
检查时间与使用时间(TOCTOU)的竞争条件
Source: CVE Program / CVE List V5
Vulnerability Title
BullWall Server Intrusion Protection 安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
BullWall Server Intrusion Protection是丹麦BullWall公司的一个服务器安全软件。 BullWall Server Intrusion Protection 4.6.0.0版本、4.6.0.6版本、4.6.0.7版本和4.6.1.4版本存在安全漏洞，该漏洞源于MFA检查延迟，可能导致特权攻击者在窗口期绕过检测。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| BullWall | Server Intrusion Protection | 4.6.0.0 ~ * | - |
II. Public POCs for CVE-2025-62003
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2025-62003
请登录查看更多情报信息。
Vendor Advisories for CVE-2025-62003 (1)
Other References for CVE-2025-62003 (2)
Same Patch Batch · BullWall · 2025-12-18 · 5 CVEs total
| CVE-2025-62001 | 8.8 HIGH | BullWall Ransomware Containment hard-coded folder exclusions |
| CVE-2025-62004 | 7.5 HIGH | BullWall Server Intrusion Protection (SIP) initialization race condition |
| CVE-2025-62000 | 7.1 HIGH | BullWall Ransomware Containment incomplete file inspection |
| CVE-2025-62002 | 4.3 MEDIUM | BullWall Ransomware Containment file count detection bypass |
IV. Related Vulnerabilities
V. Comments for CVE-2025-62003
No comments yet