CVE-2025-62001
BullWall Ransomware Containment supports configurable file and directory exclusions such as '$RECYCLE.BIN' to balance monitoring scope and performance. Certain exclusion patterns could allow an authenticated attacker to rename directories in a way that avoids monitoring. Fixed in 4.6.1.14 and 5.0.0.42, which remove hardcoded exclusion behavior and exposes exclusion handling as configurable settings.
- Score
- CVSS 3.1 8.8 High
- Status
- Modified - 9119a7d8-5eab-497f-8521-727c672e3725
- Published
- 2025-12-18
- Last modified
- 2026-01-15
- Weaknesses
- CWE-420
Affected products
References
- https://raw.githubusercontent.com/cisagov/CSAF/develop/csaf_files/IT/white/2025/va-25-352-01.json
- https://www.cve.org/CVERecord?id=CVE-2025-62001
