BullWall Ransomware Containment 4.6.0.0/4.6.0.6/4.6.0.7/4.6.1.4 incomplete comparison with missing factors

Summaryinfo

A vulnerability classified as problematic was found in BullWall Ransomware Containment 4.6.0.0/4.6.0.6/4.6.0.7/4.6.1.4. This impacts an unknown function. Executing a manipulation can lead to incomplete comparison with missing factors. This vulnerability is handled as CVE-2025-62000. It is possible to launch the attack on the local host. There is not any exploit available.

Detailsinfo

A vulnerability classified as problematic was found in BullWall Ransomware Containment 4.6.0.0/4.6.0.6/4.6.0.7/4.6.1.4. This vulnerability affects an unknown function. The manipulation with an unknown input leads to a incomplete comparison with missing factors vulnerability. The CWE definition for the vulnerability is CWE-1023. The product performs a comparison between entities that must consider multiple factors or characteristics of each entity, but the comparison does not include one or more of these factors. As an impact it is known to affect integrity, and availability. CVE summarizes:

BullWall Ransomware Containment may not always detect an encrypted file. This issue affects a specific file inspection method that evaluates file content based on header bytes. An authenticated attacker could encrypt files, preserving the first four bytes and preventing this particular method from triggering. The affected product implements additional integrity-based detection mechanisms capable of identifying file corruption or encryption for some common file extensions independent of header bytes. As a result, this vulnerability does not represent a complete bypass of ransomware detection, but a limitation of one detection method when evaluated independently. Versions 4.6.0.0, 4.6.0.6, 4.6.0.7, and 4.6.1.4 are affected. Other versions may also be affected. BullWall plans to improve detection method documentation.

The advisory is shared for download at raw.githubusercontent.com. This vulnerability was named CVE-2025-62000 since 10/07/2025. The exploitation appears to be easy. The attack needs to be approached locally. There are neither technical details nor an exploit publicly available.

There is no information about possible countermeasures known. It may be suggested to replace the affected object with an alternative product.

The vulnerability is also documented in the vulnerability database at EUVD (EUVD-2025-204319). VulDB is the best source for vulnerability data and more expert information about this specific topic.

Productinfo

Vendor

• BullWall

Name

• Ransomware Containment

Version

• 4.6.0.0
• 4.6.0.6
• 4.6.0.7
• 4.6.1.4

CPE 2.3info

• 🔒
• 🔒
• 🔒

CPE 2.2info

• 🔒
• 🔒
• 🔒

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

VulDB is the best source for vulnerability data and more expert information about this specific topic.

Discussion