EUVD-2025-210712
GHSA-prr5-fjmj-wf2h
Severity by source
AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Volume mounting is inherently local; PR:L applied because interacting with disk encryption middleware requires some system-level access, inconsistent with PR:N.
Primary rating from Vendor (mitre).
CVSS VectorVendor: mitre
Lifecycle Timeline
4DescriptionCVE.org
CPSD CryptoPro Secure Disk for Bitlocker before v7.7.4 fails to properly handle decryption errors and allows encrypted volumes to be mounted as plaintext.
AnalysisAI
CryptoPro Secure Disk for BitLocker before v7.7.4 silently falls back to plaintext volume mounting when a decryption error occurs, negating the entire confidentiality guarantee that BitLocker is meant to enforce. Disclosed publicly at Black Hat USA 2026 in research titled 'The Cost of Obscurity' (Burch), the flaw demonstrates how improper error handling in encryption middleware can fully undermine the security layer it wraps. No public exploit code has been identified at time of analysis, though the Black Hat presentation and accompanying whitepaper are publicly available, substantially lowering the knowledge barrier for exploitation; EPSS stands at a low 0.17% but may shift as presentation details circulate.
Technical ContextAI
CryptoPro Secure Disk for BitLocker is enterprise encryption middleware from CPSD (Austria) that extends Microsoft BitLocker with additional authentication and volume management capabilities. The vulnerability is catalogued under CWE-329 (Not Using a Random IV with CBC Mode), which points to a cryptographic implementation weakness in CBC-mode cipher block operations. When a decryption operation encounters an error - potentially triggered by key mismatch, malformed input, or an invalid initialization vector - the software does not fail securely (a 'fail-open' condition); instead it mounts the affected volume as plaintext, fully exposing protected data. The NVD CPE entry is recorded as cpe:2.3:a:n/a:n/a, indicating the product has not been formally catalogued in the NVD CPE dictionary, which limits automated detection and asset inventory matching. The ENISA EUVD entry is EUVD-2025-210712. All versions prior to v7.7.4 are confirmed affected by the CVE description.
RemediationAI
Upgrade CryptoPro Secure Disk for BitLocker to v7.7.4 or later; this is the vendor-confirmed patched release identified by the CVE description's explicit 'before v7.7.4' boundary. Vendor release notes and advisory details are accessible at https://www.cpsd.at/blog/. If immediate patching is not feasible, apply the following specific compensating controls: restrict or firewall any network-accessible management service exposed by CryptoPro Secure Disk to authorized management hosts only, which reduces the remote attack surface without eliminating the underlying flaw; enable host-based auditing to alert on unexpected plaintext volume mount events, providing detection capability until the patch is applied; and limit interactive access to hosts running the affected software to privileged administrators, reducing the local exploitation window. Note that none of these controls fix the underlying error-handling failure - they only reduce exposure. Organizations should treat any unpatched deployment as providing no effective encryption guarantee under error conditions.
LibreNMS before 24.10.0 allows a remote attacker to execute arbitrary code via OS command injection involving AboutContr
Reachable assertion in Open5GS up to version 2.7.6 allows remote unauthenticated attackers to crash the Diameter CER han
A Command Injection issue in the payload build page in BYOB (Build Your Own Botnet) 2.0 allows attackers to execute arbi
Denial of service in Open5GS 2.7.6 and earlier allows network-adjacent attackers with low-privilege Diameter Gx peer acc
Denial of service in Open5GS HSS (Home Subscriber Server) versions 2.7.0 through 2.7.6 is triggered remotely by manipula
Remote command injection in Control Web Panel allows unauthenticated attackers to execute arbitrary OS commands as root
LINQPad before 5.52.01 Pro edition is vulnerable to Unsafe Deserialization in LINQPad.AutoRefManager::PopulateFromCache(
Remote code execution in dash-uploader (Python package for Plotly Dash) versions 0.1.0 through 0.7.0a2 allows unauthenti
Command injection in LiteLLM 1.18.10 lets attackers who can configure MCP (Model Context Protocol) servers supply arbitr
SQL injection in AzuraCast's backup restore flow (versions up to and including 0.23.7) lets an attacker achieve privileg
Arbitrary file read in Yu AI Code Mother v4.3 lets anonymous, remote attackers retrieve files outside the intended previ
Remote code execution in APScheduler (all versions through 3.10.x and 4.0.0a5) is achievable when applications deseriali
Same weakness CWE-329 – Generation of Predictable IV with CBC Mode
View allSame technique Information Disclosure
View allShare
External POC / Exploit Code
Leaving vuln.today