CVE-2025-62001

HIGH

BullWall Ransomware Containment hard-coded folder exclusions

Title source: CVE List
STIX 2.1 vulnerability

Record summary

CVE-2025-62001 has a selected CVSS score of 8.7 (high).

Description

BullWall Ransomware Containment supports configurable file and directory exclusions such as '$RECYCLE.BIN' to balance monitoring scope and performance. Certain exclusion patterns could allow an authenticated attacker to rename directories in a way that avoids monitoring. Fixed in 4.6.1.14 and 5.0.0.42, which remove hardcoded exclusion behavior and exposes exclusion handling as configurable settings.

Description source: CVE List

Exploitation context

CISA SSVC decision

ExploitationPoC
AutomatableNo
Technical impactTotal

CISA Coordinator · SSVC 2.0.3 · Evaluated Jan 8, 2026 · Source: CVE List

Affected products and versions

1
ProductSourceVersion range

Ransomware Containment

Browse BullWall / Ransomware Containment

Default status: unknown

CVE List4.6.0.0 to < 4.6.1.14affected
4.6.0.0 to < 5.0.0.42affected
4.6.1.14unaffected
5.0.0.42unaffected

References

4