CVE-2023-50443

2023-12-1300:00:00

mitre

www.cve.org

cve-2023-50443

encrypted disks

primx cryhod

windows

vulnerability

unauthenticated attacker

unc reference

outbound network traffic

AI Score

5.1

Confidence

High

EPSS

0.001

Percentile

21.9%

JSON

Encrypted disks created by PRIMX CRYHOD for Windows before Q.2020.4 (ANSSI qualification submission) or CRYHOD for Windows before 2023.5 can be modified by an unauthenticated attacker to include a UNC reference so that it could trigger outbound network traffic from computers on which disks are opened.

References

www.primx.eu/en/bulletins/security-bulletin-23B3093B/

www.primx.eu/fr/blog/