Description
BullWall Ransomware Containment supports configurable file and directory exclusions such as '$RECYCLE.BIN' to balance monitoring scope and performance. Certain exclusion patterns could allow an authenticated attacker to rename directories in a way that avoids monitoring. Fixed in 4.6.1.14 and 5.0.0.42, which remove hardcoded exclusion behavior and exposes exclusion handling as configurable settings.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| BullWall | Ransomware Containment | 4.6.0.0 – < 4.6.1.14, 4.6.0.0 – < 5.0.0.42 | 4.6.1.14 |
Advisories 1
- VA-25-352-01 BullWall Ransomware Containment and Server Intrusion Protection multiple vulnerabilities CISA ICS & IT advisories · Dec 18, 2025