CVE-2022-34301: Kidan Cryptopro Securedisk For Bitlocker

Medium severity, CVSS 6.7. EPSS: 1% chance of exploitation in the next 30 days.

A flaw was found in CryptoPro Secure Disk bootloaders before 2022-06-01. An attacker may use this bootloader to bypass or tamper with Secure Boot protections. In order to load and execute arbitrary code in the pre-boot stage, an attacker simply needs to replace the existing signed bootloader currently in use with this bootloader. Access to the EFI System Partition is required for booting using external media.

Affected products

• Kidan Cryptopro Securedisk For Bitlocker: before 2022-06-01 (fixed in 2022-06-01)
• Microsoft Windows 10: affected versions not specified; version 20h2 only; version 21h1 only; version 21h2 only; version 1607 only; version 1809 only
• Microsoft Windows 11: affected versions not specified
• Microsoft Windows 8.1: affected versions not specified
• Microsoft Windows Rt 8.1: affected versions not specified
• Microsoft Windows Server 2012: affected versions not specified; version r2 only
• Microsoft Windows Server 2016: affected versions not specified; version 20h2 only
• Microsoft Windows Server 2019: affected versions not specified
• Microsoft Windows Server 2022: affected versions not specified
• Red Hat Enterprise Linux: version 7.0 only; version 8.0 only; version 9.0 only

Published 2022-08-26. Last modified 2026-06-17.