Vulnerability Description
Encrypted disks created by PRIMX CRYHOD for Windows before Q.2020.4 (ANSSI qualification submission) or CRYHOD for Windows before 2023.5 can be modified by an unauthenticated attacker to include a UNC reference so that it could trigger outbound network traffic from computers on which disks are opened.
CVSS Score
MEDIUM
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Primx | Cryhod | < 2020.4 |
| Microsoft | Windows | - |
References
- https://www.primx.eu/en/bulletins/security-bulletin-23B3093B/Vendor Advisory
- https://www.primx.eu/fr/blog/Product
- https://www.primx.eu/en/bulletins/security-bulletin-23B3093B/Vendor Advisory
- https://www.primx.eu/fr/blog/Product
FAQ
What is CVE-2023-50443?
CVE-2023-50443 is a vulnerability with a CVSS score of 4.6 (MEDIUM). Encrypted disks created by PRIMX CRYHOD for Windows before Q.2020.4 (ANSSI qualification submission) or CRYHOD for Windows before 2023.5 can be modified by an unauthenticated attacker to include a UNC...
How severe is CVE-2023-50443?
CVE-2023-50443 has been rated MEDIUM with a CVSS base score of 4.6/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2023-50443?
Check the references section above for vendor advisories and patch information. Affected products include: Primx Cryhod, Microsoft Windows.