PT-2025-52339 · Unknown · Bullwall Ransomware Containment

Alexander Nikolaj · Published 2025-12-18 · Updated 2026-01-15 · CVE-2025-62001

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions BullWall Ransomware Containment versions 4.6.0.0 through 4.6.1.4

Description BullWall Ransomware Containment does not monitor certain file paths, such as $recycle.bin. An attacker with file write permissions could bypass detection by renaming a directory.

Recommendations BullWall Ransomware Containment version 4.6.0.0: Implement stricter file monitoring to include previously excluded paths. BullWall Ransomware Containment version 4.6.0.6: Implement stricter file monitoring to include previously excluded paths. BullWall Ransomware Containment version 4.6.0.7: Implement stricter file monitoring to include previously excluded paths. BullWall Ransomware Containment version 4.6.1.4: Implement stricter file monitoring to include previously excluded paths.

Fix

Weakness Enumeration

CWE-420

Related Identifiers

CVE-2025-62001

Affected Products

Bullwall Ransomware Containment

References · 11

• https://osv.dev/vulnerability/CVE-2025-62001 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2025-62001 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2025-62001 · Security Note
• https://t.me/CVEtracker/40178 · Telegram Post
• https://twitter.com/TheHackerWire/status/2001775385600758172 · Twitter Post
• https://twitter.com/f1tym1/status/2011653197161550283 · Twitter Post
• https://twitter.com/CveFindCom/status/2001769251728711737 · Twitter Post
• https://twitter.com/f1tym1/status/2001786821487804674 · Twitter Post
• https://raw.githubusercontent.com/cisagov/CSAF/develop/csaf_files/IT/white/2025/va-25-352-01.json · Note
• https://raw.githubusercontent.com/cisagov/CSAF/develop/csaf_files/IT/white/2025/VA-25-352-01.json · Note
• https://twitter.com/CVEnew/status/2002104291142566108 · Twitter Post