CVE-2025-62004
Last modified
CVE-2025-62004 is a high-severity vulnerability rated 7.7/10 on the CVSS scale. BullWall Server Intrusion Protection (SIP) services are initialized after login services during system startup. A local, authenticated attacker can log in after boot and before SIP MFA is running. EPSS estimates a 0.28% chance of exploitation in the next 30 days.
Description
BullWall Server Intrusion Protection (SIP) services are initialized after login services during system startup. A local, authenticated attacker can log in after boot and before SIP MFA is running. The SIP services do not retroactively enforce MFA or disconnect sessions that were not subject to SIP MFA. Versions 4.6.0.0, 4.6.0.6, 4.6.0.7, and 4.6.1.4 are affected. Other versions mayy also be affected. BullWall plans to improve detection method documentation.
Metrics
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Bullwall | Server Intrusion Protection | 4.6.0.0 |
| Bullwall | Server Intrusion Protection | 4.6.0.6 |
| Bullwall | Server Intrusion Protection | 4.6.0.7 |
| Bullwall | Server Intrusion Protection | 4.6.1.4 |
References
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2025-62004?
How severe is CVE-2025-62004?
How do I fix CVE-2025-62004?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2025
- CVE-2025-61999OPEXUS FOIAXpress before 11.13.3.0 allows an administrative …4.8
- CVE-2025-6200The GeoDirectory WordPress plugin before 2.8.120 does not v…5.9
- CVE-2025-62000BullWall Ransomware Containment may not always detect an enc…7.1
- CVE-2025-62001BullWall Ransomware Containment supports configurable file a…8.8
- CVE-2025-62002BullWall Ransomware Containment considers the number of file…8.1
- CVE-2025-62003BullWall Server Intrusion Protection has a noticeable config…7.7
- CVE-2025-62005Cross-Site Request Forgery (CSRF) vulnerability in Fantastic…7.1
- CVE-2025-62006Missing Authorization vulnerability in VeronaLabs WP SMS wp-…5.4
- CVE-2025-62007Incorrect Privilege Assignment vulnerability in bPlugins Voi…8.8
- CVE-2025-62008Deserialization of Untrusted Data vulnerability in acowebs P…8.8
- CVE-2025-62009Cross-Site Request Forgery (CSRF) vulnerability in Dmitry V.…4.3
- CVE-2025-6201The Pixel Manager for WooCommerce – Track Conversions and An…6.4
Are you affected by CVE-2025-62004?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST