Exploit / PoCmedium
ESET detailed a flaw that could allow a bypass of the Secure Boot in UEFI systems
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2022-34302 | New Horizon Datasys bootloaders before 2022-06-01: An attacker may use this bootloader to bypass or tamper with Secure Boot protections. In order to load and execute arbitrary code… | 6.7 | 1% | ||
| CVE-2024-7344 | Howyar UEFI Application "Reloader" (32-bit and 64-bit) is vulnerable to execution of unsigned software in a hardcoded path | 8.2 | 1% | PoC |
From the original article
3 min read at securityaffairs.com
Researchers detailed a now-patched vulnerability that could allow a bypass of the Secure Boot mechanism in UEFI systems. ESET disclosed details of a now-patched vulnerability, tracked as CVE-2024-7344 (CVSS score: 6. 7), that could allow a bypass of the Secure Boot mechanism in UEFI systems.
By @securityaffairs · securityaffairs.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.