EUVD-2025-210717
GHSA-p473-hhhj-xhf5
Severity by source
AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Pre-boot EFI execution context requires physical or privileged management-plane access (AV:L, PR:H); both confidentiality and integrity are fully compromised when all boot integrity checks are bypassed.
Primary rating from Vendor (mitre).
CVSS VectorVendor: mitre
Lifecycle Timeline
4DescriptionCVE.org
In CPSD CryptoPro Secure Disk for Bitlocker before v7.7.4, bootxsa.efi fails to properly validate LUKS encryption and, if encryption is present, all CryptoPro file integrity checks are skipped.
AnalysisAI
Boot-stage integrity bypass in CPSD CryptoPro Secure Disk for BitLocker before v7.7.4 allows an attacker who can present a LUKS-encrypted volume during the pre-boot phase to cause bootxsa.efi to skip all CryptoPro file integrity checks, enabling execution of tampered EFI boot components. Publicly disclosed at Black Hat USA 2026 with an accompanying whitepaper, substantially raising the bar for exploit development. No CISA KEV listing and EPSS at the 1st percentile indicate no observed mass exploitation, but the research-quality disclosure significantly reduces attacker effort for targeted campaigns against affected endpoints.
Technical ContextAI
bootxsa.efi is the UEFI-phase integrity module of CryptoPro Secure Disk for BitLocker, a pre-boot authentication and full-disk encryption product by Austrian vendor CPSD. Its function is to cryptographically verify the integrity of CryptoPro boot-stage components before control passes to BitLocker or the OS loader. The root cause maps to CWE-347 (Improper Verification of Cryptographic Signature): when bootxsa.efi detects the presence of LUKS (Linux Unified Key Setup) disk encryption, it takes a code path that unconditionally skips the entire integrity check pipeline rather than executing it independently of the LUKS-detection branch. This is a logic flaw - the LUKS-detection conditional short-circuits the integrity gate instead of treating it as a separate, mandatory step. NVD CPE data is unresolved (cpe:2.3:a:n/a:n/a), so product enumeration relies entirely on the CVE description and the vendor blog at cpsd.at/blog.
RemediationAI
Upgrade CPSD CryptoPro Secure Disk for BitLocker to version 7.7.4 or later, the confirmed vendor-released patch version per the CVE description. Consult the vendor advisory at https://www.cpsd.at/blog/ for upgrade procedures and release notes. Until patching is complete, restrict physical access to affected endpoints - this is the primary compensating control given the pre-boot attack surface. Additionally, tightly control or disable out-of-band management interfaces (BMC, iDRAC, iLO, IPMI) to prevent virtual media mounting that could introduce a LUKS volume without physical presence; note that disabling these interfaces may affect remote server management workflows. Enforcing UEFI Secure Boot policies at the firmware level provides partial defense by limiting which EFI binaries can execute, but does not address the logic flaw within the CryptoPro module itself. Eliminating LUKS-formatted volumes from the boot environment (if operationally feasible) removes the triggering condition, though this may break legitimate Linux dual-boot or cross-platform disk configurations.
More in Jwt Attack
View allWhy is Microsoft republishing a CVE from 2013? We are republishing CVE-2013-3900 in the Security Update Guide to update
Authentication bypass in SimpleHelp 5.5.15 and prior (plus 6.0 pre-release builds) allows remote unauthenticated attacke
Authentication bypass in Fortinet FortiOS, FortiProxy, and FortiSwitchManager allows unauthenticated remote attackers to
ruby-saml provides security assertion markup language (SAML) single sign-on (SSO) for Ruby. Rated critical severity (CVS
ruby-saml provides security assertion markup language (SAML) single sign-on (SSO) for Ruby. Rated critical severity (CVS
The package jsrsasign before 10.5.25 are vulnerable to Improper Verification of Cryptographic Signature when JWS or JWT
A library injection vulnerability exists in Microsoft Teams (work or school) 24046.2813.2770.1094 for macOS. Rated criti
A library injection vulnerability exists in the WebView.app helper app of Microsoft Teams (work or school) 24046.2813.27
A library injection vulnerability exists in the com.microsoft.teams2.modulehost.app helper app of Microsoft Teams (work
The Ruby SAML library is for implementing the client side of a SAML authorization. Rated critical severity (CVSS 9.8), t
cosign is a container signing and verification utility. Rated critical severity (CVSS 9.8), this vulnerability is remote
Biscuit is an authentication and authorization token for microservices architectures. Rated critical severity (CVSS 9.8)
Same technique Information Disclosure
View allShare
External POC / Exploit Code
Leaving vuln.today