BullWall Ransomware Containment Large File Encryption Vulnerability

A vulnerability in BullWall Ransomware Containment versions 4.6.0.0, 4.6.0.6, 4.6.0.7, and 4.6.1.4 allows authenticated attackers to encrypt large files without triggering detection alerts. The software relies on monitoring the number of file modifications to identify ransomware activity, creating a gap that could be exploited. While these specific versions are confirmed to be affected, other versions before and after may also have the same vulnerability.

Impact

Exploitation of this vulnerability could lead to undetected encryption of files, allowing ransomware activity to occur without triggering any alarms.