CVE-2025-59321
CriticalCVSS 9.8Exploitation Probability (EPSS)
Low risk8th percentile - higher than 8% of all known CVEs
Summary
CPSD CryptoPro Secure Disk for Bitlocker before v7.7.4 contains a default TPM PCR policy that fails to consider the system boot state. This allows the TPM to be unsealed via an unintended execution path or from another hardware platform.
Risk Assessment
An attacker could exploit this to unseal the TPM and gain access to protected data, compromising integrity and confidentiality.
Recommendation
It is recommended to update to version 7.7.4 or later and adjust the TPM PCR policy to the specific environment.
Original NVD description (English source)
CPSD CryptoPro Secure Disk for Bitlocker before v7.7.4 contains a default TPM PCR policy that fails to consider the system boot state. This allows the TPM to be unsealed via an unintended execution path or from another hardware platform.