CVE-2025-59320: CryptoPro CPSD CryptoPro Secure Disk for Bitlocker vulnerability
CPSD CryptoPro Secure Disk for Bitlocker before v7.7.4 stores TPM2.0 secrets in a serialized format within unused disk sectors. An unauthenticated attacker with physical access to the system disk can recover this information and craft an environment to unseal the TPM.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-59320?
CVE-2025-59320 has a risk score of 46, indicating a significant vulnerability in the CryptoPro CPSD software.
How do I fix CVE-2025-59320?
To fix CVE-2025-59320, update CryptoPro CPSD to version 7.7.4 or later, which addresses the improper storage of TPM2.0 secrets.
What systems are affected by CVE-2025-59320?
CVE-2025-59320 affects versions of CryptoPro CPSD CryptoPro Secure Disk for Bitlocker before version 7.7.4.
What are the risks associated with CVE-2025-59320?
The risks of CVE-2025-59320 include unauthorized access to TPM2.0 secrets by an unauthenticated attacker with physical access to the system.
Who should be concerned about CVE-2025-59320?
Organizations and individuals using vulnerable versions of CryptoPro CPSD should prioritize addressing CVE-2025-59320 to mitigate potential security breaches.