Description
BullWall Server Intrusion Protection has a noticeable configuration-dependent delay before the MFA check for RDP connections. A remote, authenticated attacker can potentially bypass detection during this delay. Versions 4.6.0.0, 4.6.0.6, 4.6.0.7, and 4.6.1.4 are affected. Other versions may also be affected.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| BullWall | Server Intrusion Protection | 4.6.0.0 | — |
Advisories 1
- VA-25-352-01 BullWall Ransomware Containment and Server Intrusion Protection multiple vulnerabilities CISA ICS & IT advisories · Dec 18, 2025