NetSight
high7.5

CVE-2025-62003

BullWall Server Intrusion Protection has a noticeable configuration-dependent delay before the MFA check for RDP connections.

Impact

BullWall Server Intrusion Protection has a noticeable configuration-dependent delay before the MFA check for RDP connections. A remote, authenticated attacker can potentially bypass detection during this delay. Versions 4.6.0.0, 4.6.0.6, 4.6.0.7, and 4.6.1.4 are affected. Other versions may also be affected.

Affected products

VendorProductAffected versions
BullwallServer Intrusion Protection
Versions 4.6.0.0, 4.6.0.6, 4.6.0.7, 4.6.1.4

Weakness classification

References