CVE-2025-59320

CPSD CryptoPro Secure Disk for Bitlocker before v7.7.4 stores TPM2.0 secrets in a serialized format within unused disk sectors. An unauthenticated attacker with physical access to the system disk can recover this information and craft an environment to unseal the TPM...

CVE-2025-59324

CPSD CryptoPro Secure Disk for Bitlocker before v7.7.4 fails to properly validate LUKS encryption and, if encryption is present, all CryptoPro file integrity checks are skipped...

CVE-2025-59322

CPSD CryptoPro Secure Disk for Bitlocker before v7.7.4 fails to properly handle decryption errors and allows encrypted volumes to be mounted as plaintext...

CVE-2025-59320

The CVE describes CPSD CryptoPro Secure Disk for Bitlocker prior to v7.7.4 leaking TPM2.0 secrets by storing them in a serialized form in unused disk sectors. An unauthenticated attacker with physical access to the system disk can potentially recover this data and create an environment to unseal ...

CVE-2025-59321

CVE-2025-59321 affects CPSD CryptoPro Secure Disk for Bitlocker before v7.7.4. The default TPM PCR policy does not account for the system boot state, allowing the TPM to be unsealed via an unintended execution path or from another hardware platform. The practical impact is a potential weakening o...

EUVD-2025-210712

CPSD CryptoPro Secure Disk for Bitlocker before v7.7.4 fails to properly handle decryption errors and allows encrypted volumes to be mounted as plaintext...

EUVD-2025-210713

CPSD CryptoPro Secure Disk for Bitlocker before v7.7.4 fails to properly validate LUKS encryption and, if encryption is present, all CryptoPro file integrity checks are skipped...

EUVD-2025-210717

In CPSD CryptoPro Secure Disk for Bitlocker before v7.7.4, bootxsa.efi fails to properly validate LUKS encryption and, if encryption is present, all CryptoPro file integrity checks are skipped...

CVE-2025-59326

CVE-2025-59326 affects CPSD CryptoPro Secure Disk for Bitlocker prior to v7.7.4. The issue is that IMA policy protections are not enforced across temporary file systems, enabling unsigned code to be executed from those locations. This describes a trust boundary bypass involving temporary storage ...

CVE-2025-59324

CVE-2025-59324 affects CPSD CryptoPro Secure Disk for Bitlocker prior to v7.7.4. The issue: incorrect validation of LUKS encryption, and if encryption is present, CryptoPro file integrity checks are skipped. This could undermine integrity verification for systems using BitLocker with CryptoPro Se...

CVE-2025-59319

CVE-2025-59319 affects CPSD CryptoPro Secure Disk for Bitlocker before v7.7.4. The root cause is failure to certify the integrity of the intended boot partition and selecting the first partition index that matches a hardcoded type value. This allows a crafted Linux partition to be inserted ahead ...

CVE-2025-59325

The CVE-2025-59325 entry concerns CPSD CryptoPro Secure Disk for BitLocker before v7.7.4. The vulnerability is that the solution fails to encrypt the initramfs contents, enabling offline recovery of secrets and cryptographic details. Available connected data confirms the affected product and the ...

CVE-2025-59322

CVE-2025-59322 affects CPSD CryptoPro Secure Disk for Bitlocker prior to 7.7.4. The issue is due to improper handling of decryption errors, which can allow encrypted BitLocker volumes to be mounted as plaintext. Exploitation details are not provided in the documents. Impact: potential plaintext a...

CVE-2025-59321

CPSD CryptoPro Secure Disk for Bitlocker before v7.7.4 contains a default TPM PCR policy that fails to consider the system boot state. This allows the TPM to be unsealed via an unintended execution path or from another hardware platform...

CVE-2025-59326

CPSD CryptoPro Secure Disk for Bitlocker before v7.7.4 fails to enforce IMA policy protections across temporary file systems, allowing for unsigned code to be executed from these locations...

CVE-2025-59325

CPSD CryptoPro Secure Disk for Bitlocker before v7.7.4 fails to encrypt the initramfs contents, allowing for the offline recovery of secrets and cryptographic details...

EUVD-2025-210711

CPSD CryptoPro Secure Disk for Bitlocker before v7.7.4 fails to certify the integrity of the intended boot partition and selects the first partition index matching a hardcoded type value. A crafted Linux partition could be inserted ahead of this intended target, allowing for code execution in the...

CVE-2025-59323

The CVE describes a vulnerability in CPSD CryptoPro Secure Disk for Bitlocker prior to v7.7.4 where the DataStore (a non-partitioned filesystem storing configuration and cryptographic details) does not validate its integrity. This can allow crafted DataStore contents to affect service availabilit...

CVE-2025-59323

CPSD CryptoPro Secure Disk for Bitlocker before v7.7.4 fails to validate the integrity of the DataStore, a non-partitioned filesystem, responsible for storing configuration and cryptographic details. Crafted DataStore contents can impact service availability and/or allow for code execution in the...

CVE-2025-59319

CPSD CryptoPro Secure Disk for Bitlocker before v7.7.4 fails to certify the integrity of the intended boot partition and selects the first partition index matching a hardcoded type value. A crafted Linux partition could be inserted ahead of this intended target, allowing for code execution in the...