Encrypted disks created by PRIMX CRYHOD for Windows before Q.2020.4 (ANSSI qualification submission) or CRYHOD for Windows before 2023.5 can be modified by an unauthenticated attacker to include a UNC reference so that it could trigger outbound network traffic from computers on which disks are opened.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Cryhod | Primx | * | 2020.4 (excluding) |
| Cryhod | Primx | 2021.0 (including) | 2021.3 (excluding) |
| Cryhod | Primx | 2023.0 (including) | 2023.5 (excluding) |