PT-2025-52340 · Bullwall · Bullwall Ransomware Containment

Alexander Nikolaj · CVE-2025-62002 · Published 2025-12-18 · Updated 2026-01-15

Positive Technologies (AI Summary)

CVSS v3.1

8.1

High

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H

Name of the Vulnerable Software and Affected Versions BullWall Ransomware Containment versions 4.6.0.0 through 4.6.1.4

Description BullWall Ransomware Containment’s detection mechanism, which relies on the number of file modifications, can be bypassed by an authenticated attacker. An attacker could encrypt a single large file without triggering a detection alert.

Recommendations Update to a version newer than 4.6.1.4.

Fix

Improperly Implemented Security Check for Standard

Weakness Enumeration

CWE-358

Related Identifiers

CVE-2025-62002

Affected Products

Bullwall Ransomware Containment

References · 10

• https://osv.dev/vulnerability/CVE-2025-62002 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2025-62002 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2025-62002 · Security Note
• https://twitter.com/CVEnew/status/2002104289133502816 · Twitter Post
• https://twitter.com/f1tym1/status/2001786823228391503 · Twitter Post
• https://raw.githubusercontent.com/cisagov/CSAF/develop/csaf_files/IT/white/2025/va-25-352-01.json · Note
• https://twitter.com/f1tym1/status/2011653199019536443 · Twitter Post
• https://raw.githubusercontent.com/cisagov/CSAF/develop/csaf_files/IT/white/2025/VA-25-352-01.json · Note
• https://twitter.com/f1tym1/status/2010806426604536186 · Twitter Post
• https://t.me/CVEtracker/40179 · Telegram Post