Exploit / PoChigh
Three flaws allow attackers to bypass UEFI Secure Boot feature
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2022-34301 | CryptoPro Secure Disk bootloaders before 2022-06-01: An attacker may use this bootloader to bypass or tamper with Secure Boot protections. In order to load and execute arbitrary code… | 6.7 | <1% | ||
| CVE-2022-34302 | New Horizon Datasys bootloaders before 2022-06-01: An attacker may use this bootloader to bypass or tamper with Secure Boot protections. In order to load and execute arbitrary code… | 6.7 | 1% | ||
| CVE-2022-34303 | Eurosoft bootloaders before 2022-06-01: An attacker may use this bootloader to bypass or tamper with Secure Boot protections. In order to load and execute arbitrary code… | 6.7 | <1% |
From the original article
3 min read at securityaffairs.com
Researchers discovered a flaw in three signed third-party UEFI boot loaders that allow bypass of the UEFI Secure Boot feature. Researchers from hardware security firm Eclypsium have discovered a vulnerability in three signed third-party Unified Extensible Firmware Interface (UEFI) boot loaders that can be exploited to bypass the UEFI Secure Boot feature.
By @securityaffairs · securityaffairs.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.