Approved changes feed: RSS · Atom

cpe:2.3:a:bullwall:server_intrusion_protection:4.6.0.7:*:*:*:*:*:*:*

part: a version: 4.6.0.7 update: *

VendorBullwall (5e5afa60-7784-5bea-9967-3079e4e5db5a)
ProductServer Intrusion Protection (f2c39583-7119-5ef4-a7b5-e0ba8882b1d3)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-62004 vulnerable 2026-06-08 07:37:28.526964 BullWall Server Intrusion Protection (SIP) initialization race condition
HIGH (7.5)
BullWall Server Intrusion Protection (SIP) services are initialized after login services during system startup. A local, authenticated attacker can log in after boot and before SIP MFA is running. The SIP services do not retroactively enforce MFA or disconnect sessions that were not subject to SIP MFA. Versions 4.6.0.0, 4.6.0.6, 4.6.0.7, and 4.6.1.4 are affected. Other versions mayy also be affected. BullWall plans to improve detection method documentation.
Published: 2025-12-18T20:36:13.123Z
Updated: 2026-01-15T19:51:45.196Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-62003 vulnerable 2026-06-08 07:37:28.525551 BullWall Server Intrusion Protection RDP MFA connection delay
HIGH (7.5)
BullWall Server Intrusion Protection has a noticeable configuration-dependent delay before the MFA check for RDP connections. A remote, authenticated attacker can potentially bypass detection during this delay. Versions 4.6.0.0, 4.6.0.6, 4.6.0.7, and 4.6.1.4 are affected. Other versions may also be affected.
Published: 2025-12-18T20:35:52.330Z
Updated: 2026-01-15T19:51:31.946Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.