Strix
26.1K

CVE-2025-59320

Unknown

Last modified

CVE-2025-59320 is a vulnerability of currently unknown severity. CPSD CryptoPro Secure Disk for Bitlocker before v7.7.4 stores TPM2.0 secrets in a serialized format within unused disk sectors. An unauthenticated attacker with physical access to the system disk can recover this information and craft an environment to unseal the TPM..

Description

CPSD CryptoPro Secure Disk for Bitlocker before v7.7.4 stores TPM2.0 secrets in a serialized format within unused disk sectors. An unauthenticated attacker with physical access to the system disk can recover this information and craft an environment to unseal the TPM.

Affected Software

Source: CNA advisory (CVE.org). NVD analysis pending.

VendorProductVersions
——n/a

References

Timeline

Published
Last Modified
Status
Received

Frequently Asked Questions

What is CVE-2025-59320?
CPSD CryptoPro Secure Disk for Bitlocker before v7.7.4 stores TPM2.0 secrets in a serialized format within unused disk sectors. An unauthenticated attacker with physical access to the system disk can recover this information and craft an environment to unseal the TPM.
How severe is CVE-2025-59320?
Severity scoring for CVE-2025-59320 is pending analysis.
How do I fix CVE-2025-59320?
Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.

How Strix Helps

Related CVEs from 2025

View all 2025CVEs →

Are you affected by CVE-2025-59320?

Run a free Strix scan to check your systems for this vulnerability.

Scan your code now

Source: NVD / NIST