CVE-2025-10010 affects CPSD CryptoPro Secure Disk, where a vulnerability in its pre-boot Linux environment allows attackers to modify configuration files not validated by the Integrity Measurement Architecture (IMA). This medium-severity vulnerability (CVSS 6.8) requires physical access to the device, but once exploited, it grants root-level arbitrary code execution, enabling backdoors and data access. Currently, there is no known active exploitation, public exploit code, or significant community discussion surrounding this CVE.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
< 7.6.6CPE matchmatch criteria | cpe:2.3:a:cpsd:cryptopro_secure_disk:*:*:*:*:*:bitlocker:*:* |
CVSS version used by this source: 3.1
CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
The average CVE in this peer group has 0.0 Twitter, 0.1 Reddit, 0.1 Bluesky, 0.0 Mastodon, and 0.1 GitHub mentions.
The average CVE in this peer group has 0.2 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.
Remediation records are not available for this CVE.