CVE-2025-62003: Bullwall Server Intrusion Protection

High severity, CVSS 7.5. EPSS: 0.3% chance of exploitation in the next 30 days.

BullWall Server Intrusion Protection has a noticeable configuration-dependent delay before the MFA check for RDP connections. A remote, authenticated attacker can potentially bypass detection during this delay. Versions 4.6.0.0, 4.6.0.6, 4.6.0.7, and 4.6.1.4 are affected. Other versions may also be affected.

Affected products

• Bullwall Server Intrusion Protection: version 4.6.0.0 only; version 4.6.0.6 only; version 4.6.0.7 only; version 4.6.1.4 only

Published 2025-12-18. Last modified 2026-06-17.