CVE-2023-50443

—

CVSS 3.1

4.6 medium

EPSS

<1%p24

Published

Dec 13, 2023 (Dec 13, 2023)

Modified

Jun 17, 2026

Description

Encrypted disks created by PRIMX CRYHOD for Windows before Q.2020.4 (ANSSI qualification submission) or CRYHOD for Windows before 2023.5 can be modified by an unauthenticated attacker to include a UNC reference so that it could trigger outbound network traffic from computers on which disks are opened.

Vendors: primx
Products: cryhod
Vector: CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

NVD CVE.org GitHub PoCs EPSS (0.3%)

In the news0 stories

No ingested article mentions this CVE yet.