PT-2023-31551 · Primx · Primx Cryhod For Windows

Published 2023-12-13 · Updated 2023-12-20 · CVE-2023-50443

Positive Technologies (AI Summary)

CVSS v3.1

4.6

Medium

Base vector

AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions PRIMX CRYHOD for Windows versions prior to Q.2020.4 PRIMX CRYHOD for Windows versions prior to 2023.5

Description Encrypted disks created by PRIMX CRYHOD for Windows can be modified by an unauthenticated attacker to include a UNC reference, triggering outbound network traffic from computers on which disks are opened.

Recommendations For PRIMX CRYHOD for Windows versions prior to Q.2020.4, update to a version Q.2020.4 or later. For PRIMX CRYHOD for Windows versions prior to 2023.5, update to a version 2023.5 or later.

Fix

Related Identifiers

CVE-2023-50443

Affected Products

Primx Cryhod For Windows

References · 7

• https://primx.eu/en/bulletins/security-bulletin-23B3093B · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-50443 · Security Note
• https://osv.dev/vulnerability/CVE-2023-50443 · Vendor Advisory
• https://twitter.com/VulmonFeeds/status/1735085070644294050 · Twitter Post
• https://twitter.com/CVEnew/status/1735034320144978100 · Twitter Post
• https://primx.eu/fr/blog · Note
• https://twitter.com/RedPacketSec/status/1737051459282215384 · Twitter Post