CVE-2025-59320

The CVE describes CPSD CryptoPro Secure Disk for Bitlocker prior to v7.7.4 leaking TPM2.0 secrets by storing them in a serialized form in unused disk sectors. An unauthenticated attacker with physical access to the system disk can potentially recover this data and create an environment to unseal ...

CVE-2025-59321

CVE-2025-59321 affects CPSD CryptoPro Secure Disk for Bitlocker before v7.7.4. The default TPM PCR policy does not account for the system boot state, allowing the TPM to be unsealed via an unintended execution path or from another hardware platform. The practical impact is a potential weakening o...

CVE-2025-59320

CPSD CryptoPro Secure Disk for Bitlocker before v7.7.4 stores TPM2.0 secrets in a serialized format within unused disk sectors. An unauthenticated attacker with physical access to the system disk can recover this information and craft an environment to unseal the TPM...

EUVD-2025-210712

CPSD CryptoPro Secure Disk for Bitlocker before v7.7.4 fails to properly handle decryption errors and allows encrypted volumes to be mounted as plaintext...

CVE-2025-59323

The CVE describes a vulnerability in CPSD CryptoPro Secure Disk for Bitlocker prior to v7.7.4 where the DataStore (a non-partitioned filesystem storing configuration and cryptographic details) does not validate its integrity. This can allow crafted DataStore contents to affect service availabilit...

CVE-2025-59319

CVE-2025-59319 affects CPSD CryptoPro Secure Disk for Bitlocker before v7.7.4. The root cause is failure to certify the integrity of the intended boot partition and selecting the first partition index that matches a hardcoded type value. This allows a crafted Linux partition to be inserted ahead ...

CVE-2025-59321

CPSD CryptoPro Secure Disk for Bitlocker before v7.7.4 contains a default TPM PCR policy that fails to consider the system boot state. This allows the TPM to be unsealed via an unintended execution path or from another hardware platform...

CVE-2025-59323

CPSD CryptoPro Secure Disk for Bitlocker before v7.7.4 fails to validate the integrity of the DataStore, a non-partitioned filesystem, responsible for storing configuration and cryptographic details. Crafted DataStore contents can impact service availability and/or allow for code execution in the...

CVE-2025-59319

CPSD CryptoPro Secure Disk for Bitlocker before v7.7.4 fails to certify the integrity of the intended boot partition and selects the first partition index matching a hardcoded type value. A crafted Linux partition could be inserted ahead of this intended target, allowing for code execution in the...

EUVD-2025-210714

CPSD CryptoPro Secure Disk for Bitlocker before v7.7.4 fails to validate the integrity of the DataStore, a non-partitioned filesystem, responsible for storing configuration and cryptographic details. Crafted DataStore contents can impact service availability and/or allow for code execution in the...

EUVD-2025-210716

CPSD CryptoPro Secure Disk for Bitlocker before v7.7.4 contains a default TPM PCR policy that fails to consider the system boot state. This allows the TPM to be unsealed via an unintended execution path or from another hardware platform...