CVE Catalog

CVE-2025-59324

CriticalCVSS 9.1
Published: Updated: Translated: NVD NIST

Exploitation Probability (EPSS)

Low risk
0.11%

2th percentile - higher than 2% of all known CVEs

Summary

CPSD CryptoPro Secure Disk for Bitlocker before v7.7.4 fails to properly validate LUKS encryption and, if encryption is present, all CryptoPro file integrity checks are skipped.

Risk Assessment

An attacker could exploit this flaw to bypass integrity checks, potentially leading to unauthorized code execution or data confidentiality breach.

Recommendation

It is recommended to update CPSD CryptoPro Secure Disk to version 7.7.4 or later immediately.

Original NVD description (English source)

CPSD CryptoPro Secure Disk for Bitlocker before v7.7.4 fails to properly validate LUKS encryption and, if encryption is present, all CryptoPro file integrity checks are skipped.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS