Vulnerabilityhigh
VU#738147: Vendor-signed UEFI Shell applications allow Secure Boot bypass
AI summary · grok-4.7Summaries by Vani AI
CERT warns vendor-signed UEFI shells from Acer, Dell, and others can bypass Secure Boot.
CERT/CC VU#738147 says vendor-signed UEFI Shell applications that expose commands such as mm and dmpstore can modify protected pre-boot memory and run untrusted UEFI code when Secure Boot trusts the vendor certificate or Authenticode hash. Binarly and Eclypsium identified affected shells distributed by Acer, Dell, Eurosoft, and Framework, and the note publishes Authenticode and file hashes. Administrators are told to install firmware updates and add the binaries to vendor DBX revocation lists. The note does not report confirmed exploitation.
Key facts
- Signed shells expose mm and dmpstore memory-access commands.
- A trusted DB certificate or Authenticode hash allows execution under Secure Boot.
- Named vendors include Acer, Dell, Eurosoft, and Framework.
- Mitigation is DBX revocation plus vendor firmware updates.
- Products
- UEFI ShellSecure Boot
Indicators of compromise
auto-extracted · verify before use · export allAll| Type | Indicator | Context |
|---|---|---|
| sha256 | 044f80d53ecea7dc108bbf54a89f431d22aa4ebd9b43da3a2abba75bede8b431 | 1659ba43a5770268b73d4eb479 Unknown `UEFI shell` mm,dmpstore 044f80d53ecea7dc108bbf54a89f431d22aa4ebd9b43da3a2abba75bede8b431 67bf47b637bff078e6eae9afbae26b82c701739ae7fcd8e7d282b1f2901 |
| sha256 | 09d895bb03bdac3188ef61b09ab72b99492cfd0b785cbc3eb2eb75657a2f9fa0 | 82f952dc7c9beda1a4fc911dddce Getac `UEFI shell` mm,dmpstore 09d895bb03bdac3188ef61b09ab72b99492cfd0b785cbc3eb2eb75657a2f9fa0 380a387b53a0ca586fe32eb1459b036f5dc178b26b2b0ec618c598eb471 |
| sha256 | 0e03ff927005c70636273a4b9287683a821082f952dc7c9beda1a4fc911dddce | 6ad26c1d739720a2793acaefbd8b6c16a599b48dcdbf594640522744483 0e03ff927005c70636273a4b9287683a821082f952dc7c9beda1a4fc911dddce Getac `UEFI shell` mm,dmpstore 09d895bb03bdac3188ef61b09ab7 |
| sha256 | 113a80eac88190d96832cd50c9ea8de3bd6e08d8bcae2e6cea738eb73f64c5d7 | 6533dcdf8e5f6de85949855695e78 Dell `UEFI shell` mm,dmpstore 113a80eac88190d96832cd50c9ea8de3bd6e08d8bcae2e6cea738eb73f64c5d7 d2ed7a747c5b3e5c83319e5d186ec602918fbf0651d059699a3c68f609d |
| sha256 | 1e918f170a796b4b0b1400bb9bdae75be1cf86705c2d0fc8fb9dd0c5016b933b | 3cbcede3634e0a4b3644b51e1c8a0a048272992c738513ebc96cd3e3360 1e918f170a796b4b0b1400bb9bdae75be1cf86705c2d0fc8fb9dd0c5016b933b Framework `UEFI shell` mm,dmpstore 2944da098861619e21b522a6 |
| sha256 | 1f2c450bbf287e35747561723079c166aed3eddfc509b26c18dd8e19417f1838 | 158f11535d8458b8497a35e96d5afc76e43825f255d2d6aa2da74bad883 1f2c450bbf287e35747561723079c166aed3eddfc509b26c18dd8e19417f1838 MinisForum `UEFI shell` mm,dmpstore 5e7b3650103fb1c15e610e2 |
| sha256 | 20cca70af9e3b4e5640d52840c84a1968d5be6ca881b393bc236f8d349c225ce | 158f11535d8458b8497a35e96d5afc76e43825f255d2d6aa2da74bad883 20cca70af9e3b4e5640d52840c84a1968d5be6ca881b393bc236f8d349c225ce Dell `UEFI shell` mm,dmpstore b0af2158f11535d8458b8497a35e9 |
| sha256 | 2944da098861619e21b522a642235bb2ec189ff20ef96e100b2ffdd9a39c3416 | 5c2d0fc8fb9dd0c5016b933b Framework `UEFI shell` mm,dmpstore 2944da098861619e21b522a642235bb2ec189ff20ef96e100b2ffdd9a39c3416 51401e93b940dec1a4391303fb6e390194b90113a8f7da6e711253c82a0 |
| sha256 | 2bfbec41b536b248a3e0a28dddfbcd57f774f03b72028cec91def28b2dcffc2f | a5b6ccd21a528374f0fb85958516966db9331ca68923577352b0a4b45b7 2bfbec41b536b248a3e0a28dddfbcd57f774f03b72028cec91def28b2dcffc2f Dell `UEFI shell` mm,dmpstore 3789ca5b6ccd21a528374f0fb8595 |
| sha256 | 3789ca5b6ccd21a528374f0fb85958516966db9331ca68923577352b0a4b45b7 | 4c7f08560963d616b3c95b1d382e2 Dell `UEFI shell` mm,dmpstore 3789ca5b6ccd21a528374f0fb85958516966db9331ca68923577352b0a4b45b7 2bfbec41b536b248a3e0a28dddfbcd57f774f03b72028cec91def28b2dc |
| sha256 | 380a387b53a0ca586fe32eb1459b036f5dc178b26b2b0ec618c598eb4714d1fe | 5bb03bdac3188ef61b09ab72b99492cfd0b785cbc3eb2eb75657a2f9fa0 380a387b53a0ca586fe32eb1459b036f5dc178b26b2b0ec618c598eb4714d1fe Lenovo `UEFI shell` mm,dmpstore b0af2158f11535d8458b8497a35 |
| sha256 | 51401e93b940dec1a4391303fb6e390194b90113a8f7da6e711253c82a02b8e4 | a098861619e21b522a642235bb2ec189ff20ef96e100b2ffdd9a39c3416 51401e93b940dec1a4391303fb6e390194b90113a8f7da6e711253c82a02b8e4 Framework `UEFI shell` mm,dmpstore 2944da098861619e21b522a6 |
| sha256 | 53d87f3b7729fe82b47606a85e606c30d2bb61d3da3f01caef17eb7164bca261 | 6ad26c1d739720a2793acaefbd8b6c16a599b48dcdbf594640522744483 53d87f3b7729fe82b47606a85e606c30d2bb61d3da3f01caef17eb7164bca261 Uniwill `UEFI shell` mm,dmpstore 55682bec887134a2ccaa2cd545 |
| sha256 | 55682bec887134a2ccaa2cd5458cd3fe6395ea93bb88c9dc541806428b14fc66 | d3da3f01caef17eb7164bca261 Uniwill `UEFI shell` mm,dmpstore 55682bec887134a2ccaa2cd5458cd3fe6395ea93bb88c9dc541806428b14fc66 d4f05110f4bb55677426067db88f61595dc1831659ba43a5770268b73d4 |
| sha256 | 5cdf3d75c0ec0800b9692aedef19527f06eb4a16fdda586f5527350e2f6a40ad | a5b6ccd21a528374f0fb85958516966db9331ca68923577352b0a4b45b7 5cdf3d75c0ec0800b9692aedef19527f06eb4a16fdda586f5527350e2f6a40ad Dell `UEFI shell` mm,dmpstore 3789ca5b6ccd21a528374f0fb8595 |
| sha256 | 5e7b3650103fb1c15e610e2381351d9b36546f260284535ed5774adf7532f633 | 509b26c18dd8e19417f1838 MinisForum `UEFI shell` mm,dmpstore 5e7b3650103fb1c15e610e2381351d9b36546f260284535ed5774adf7532f633 9de8a0194052063ce541b34fbd451071ea3051914fc234b6d691d006f0a |
| sha256 | 61ee9a23c366a102ceb34c78af7816413769791658cdb668b02cb81ec94f7c70 | 3051914fc234b6d691d006f0a0f994 Msi `UEFI shell` mm,dmpstore 61ee9a23c366a102ceb34c78af7816413769791658cdb668b02cb81ec94f7c70 da5f4aa2008e6e26c3553b3dee4cf835ceac88820658693704cea35f627 |
| sha256 | 665b26ad26c1d739720a2793acaefbd8b6c16a599b48dcdbf594640522744483 | 086d60ac2a493b55818cd7cf Framework `UEFI shell` mm,dmpstore 665b26ad26c1d739720a2793acaefbd8b6c16a599b48dcdbf594640522744483 0e03ff927005c70636273a4b9287683a821082f952dc7c9beda1a4fc911 |
| sha256 | 67bf47b637bff078e6eae9afbae26b82c701739ae7fcd8e7d282b1f2901f9634 | 0d53ecea7dc108bbf54a89f431d22aa4ebd9b43da3a2abba75bede8b431 67bf47b637bff078e6eae9afbae26b82c701739ae7fcd8e7d282b1f2901f9634 Unknown `UEFI shell` mm,dmpstore 81da15d6acdfb7868ecea44d41 |
| sha256 | 6ccd1ee8b067d02c083e73a0c2e18712d55b78bd99fec392daf702a147ce6d41 | a5b6ccd21a528374f0fb85958516966db9331ca68923577352b0a4b45b7 6ccd1ee8b067d02c083e73a0c2e18712d55b78bd99fec392daf702a147ce6d41 Dell `UEFI shell` mm,dmpstore 3789ca5b6ccd21a528374f0fb8595 |
| sha256 | 6ce33e23b21bfa1ce143fdadf55d00340a9fa3215dd73e31fa6307d5733b8841 | b93558317a51eafd5be9c5ead5ef9 Acer `UEFI shell` mm,dmpstore 6ce33e23b21bfa1ce143fdadf55d00340a9fa3215dd73e31fa6307d5733b8841 77019c81bdc1accbd0c99b20b12edcd578dabc4cac4fa66934465f20c1c |
| sha256 | 77019c81bdc1accbd0c99b20b12edcd578dabc4cac4fa66934465f20c1c0aa2c | e23b21bfa1ce143fdadf55d00340a9fa3215dd73e31fa6307d5733b8841 77019c81bdc1accbd0c99b20b12edcd578dabc4cac4fa66934465f20c1c0aa2c Acer `UEFI shell` mm,dmpstore ad30615c1ad7da2e47dcf28a571dc |
| sha256 | 77a36a8f035dfb1fdf5170f396e29a8b3e4b93558317a51eafd5be9c5ead5ef9 | d3044e9aa5d4e2dfa9f94b0ffa437f4ebf3f39d57c9f276b3b9988b2b0b 77a36a8f035dfb1fdf5170f396e29a8b3e4b93558317a51eafd5be9c5ead5ef9 Acer `UEFI shell` mm,dmpstore 6ce33e23b21bfa1ce143fdadf55d0 |
| sha256 | 7e1dbf3e72b8c3c4967364f49da0cd5e3c09d921086d60ac2a493b55818cd7cf | a098861619e21b522a642235bb2ec189ff20ef96e100b2ffdd9a39c3416 7e1dbf3e72b8c3c4967364f49da0cd5e3c09d921086d60ac2a493b55818cd7cf Framework `UEFI shell` mm,dmpstore 665b26ad26c1d739720a2793 |
| sha256 | 805f72afd179fe67ceee14c76f92c8f76cad23130fa075d1d5678e242a0d3d52 | de SHA hash SHA256 file hash] Acer `UEFI shell` mm,dmpstore 805f72afd179fe67ceee14c76f92c8f76cad23130fa075d1d5678e242a0d3d52 f52b8dbffaa9b57910b3c369c384f7ccfe8d696e05e7a8a7f0da0db5540 |
| sha256 | 81da15d6acdfb7868ecea44d41c869c2295603af9a44a2d106d4c0e57d669087 | 9ae7fcd8e7d282b1f2901f9634 Unknown `UEFI shell` mm,dmpstore 81da15d6acdfb7868ecea44d41c869c2295603af9a44a2d106d4c0e57d669087 8e61f24a72c3138bde4b63766ceee1ce1a70a00046cc6867c61520084d8 |
| sha256 | 88fbb6425f43eb54194dbb607141e65adc2d1e7e0d33b6bfe762504547024942 | 5d6acdfb7868ecea44d41c869c2295603af9a44a2d106d4c0e57d669087 88fbb6425f43eb54194dbb607141e65adc2d1e7e0d33b6bfe762504547024942 Impact This vulnerability impacts systems that trust the co |
| sha256 | 8e61f24a72c3138bde4b63766ceee1ce1a70a00046cc6867c61520084d884346 | 5d6acdfb7868ecea44d41c869c2295603af9a44a2d106d4c0e57d669087 8e61f24a72c3138bde4b63766ceee1ce1a70a00046cc6867c61520084d884346 Unknown `UEFI shell` mm,dmpstore 81da15d6acdfb7868ecea44d41 |
| sha256 | 9de8a0194052063ce541b34fbd451071ea3051914fc234b6d691d006f0a0f994 | 650103fb1c15e610e2381351d9b36546f260284535ed5774adf7532f633 9de8a0194052063ce541b34fbd451071ea3051914fc234b6d691d006f0a0f994 Msi `UEFI shell` mm,dmpstore 61ee9a23c366a102ceb34c78af7816 |
| sha256 | a249bd3044e9aa5d4e2dfa9f94b0ffa437f4ebf3f39d57c9f276b3b9988b2b0b | 689c857e13414a9ae0e9f84a10a5f Acer `UEFI shell` mm,dmpstore a249bd3044e9aa5d4e2dfa9f94b0ffa437f4ebf3f39d57c9f276b3b9988b2b0b 77a36a8f035dfb1fdf5170f396e29a8b3e4b93558317a51eafd5be9c5ea |
| sha256 | a632de93bfd10d89326db2171673bd246cd6533dcdf8e5f6de85949855695e78 | a5b6ccd21a528374f0fb85958516966db9331ca68923577352b0a4b45b7 a632de93bfd10d89326db2171673bd246cd6533dcdf8e5f6de85949855695e78 Dell `UEFI shell` mm,dmpstore 113a80eac88190d96832cd50c9ea8 |
| sha256 | ad30615c1ad7da2e47dcf28a571dc62b9c034c6ade434de8daa35965062f3a7f | abc4cac4fa66934465f20c1c0aa2c Acer `UEFI shell` mm,dmpstore ad30615c1ad7da2e47dcf28a571dc62b9c034c6ade434de8daa35965062f3a7f c0194c555db9f5f7080c3344db028f44af522bac63c13d764ff416ac244 |
| sha256 | b0af2158f11535d8458b8497a35e96d5afc76e43825f255d2d6aa2da74bad883 | d696e05e7a8a7f0da0db5540949c2 Acer `UEFI shell` mm,dmpstore b0af2158f11535d8458b8497a35e96d5afc76e43825f255d2d6aa2da74bad883 b3a999b7fad3c8cfeff88ab8b29d261b241689c857e13414a9ae0e9f84a |
| sha256 | b2e0afb2844241479db7d19398c837049fb4c7f08560963d616b3c95b1d382e2 | 158f11535d8458b8497a35e96d5afc76e43825f255d2d6aa2da74bad883 b2e0afb2844241479db7d19398c837049fb4c7f08560963d616b3c95b1d382e2 Dell `UEFI shell` mm,dmpstore 3789ca5b6ccd21a528374f0fb8595 |
| sha256 | b3a999b7fad3c8cfeff88ab8b29d261b241689c857e13414a9ae0e9f84a10a5f | 158f11535d8458b8497a35e96d5afc76e43825f255d2d6aa2da74bad883 b3a999b7fad3c8cfeff88ab8b29d261b241689c857e13414a9ae0e9f84a10a5f Acer `UEFI shell` mm,dmpstore a249bd3044e9aa5d4e2dfa9f94b0f |
| sha256 | c0194c555db9f5f7080c3344db028f44af522bac63c13d764ff416ac244e3c08 | 15c1ad7da2e47dcf28a571dc62b9c034c6ade434de8daa35965062f3a7f c0194c555db9f5f7080c3344db028f44af522bac63c13d764ff416ac244e3c08 Acer `UEFI shell` mm,dmpstore b0af2158f11535d8458b8497a35e9 |
| sha256 | d2ed7a747c5b3e5c83319e5d186ec602918fbf0651d059699a3c68f609d25cf2 | 0eac88190d96832cd50c9ea8de3bd6e08d8bcae2e6cea738eb73f64c5d7 d2ed7a747c5b3e5c83319e5d186ec602918fbf0651d059699a3c68f609d25cf2 Dell `UEFI shell` mm,dmpstore 3789ca5b6ccd21a528374f0fb8595 |
| sha256 | d4e7b11a30edd1f89c4fa1664eff98907202f15bc59c2cdfddf345a09ffbb1d4 | 158f11535d8458b8497a35e96d5afc76e43825f255d2d6aa2da74bad883 d4e7b11a30edd1f89c4fa1664eff98907202f15bc59c2cdfddf345a09ffbb1d4 Eurosoft `UEFI shell` mm,dmpstore e9d873cbcede3634e0a4b3644 |
| sha256 | d4f05110f4bb55677426067db88f61595dc1831659ba43a5770268b73d4eb479 | bec887134a2ccaa2cd5458cd3fe6395ea93bb88c9dc541806428b14fc66 d4f05110f4bb55677426067db88f61595dc1831659ba43a5770268b73d4eb479 Unknown `UEFI shell` mm,dmpstore 044f80d53ecea7dc108bbf54a8 |
| sha256 | da5f4aa2008e6e26c3553b3dee4cf835ceac88820658693704cea35f62733ce3 | a23c366a102ceb34c78af7816413769791658cdb668b02cb81ec94f7c70 da5f4aa2008e6e26c3553b3dee4cf835ceac88820658693704cea35f62733ce3 Seagate `UEFI shell` mm,dmpstore 665b26ad26c1d739720a2793ac |
| sha256 | e9d873cbcede3634e0a4b3644b51e1c8a0a048272992c738513ebc96cd3e3360 | bc59c2cdfddf345a09ffbb1d4 Eurosoft `UEFI shell` mm,dmpstore e9d873cbcede3634e0a4b3644b51e1c8a0a048272992c738513ebc96cd3e3360 1e918f170a796b4b0b1400bb9bdae75be1cf86705c2d0fc8fb9dd0c5016 |
| sha256 | ec23a874c3c0e852becc8fa4010c60e5f8922fe671f5351cf8a976da59a01f86 | a5b6ccd21a528374f0fb85958516966db9331ca68923577352b0a4b45b7 ec23a874c3c0e852becc8fa4010c60e5f8922fe671f5351cf8a976da59a01f86 Dell `UEFI shell` mm,dmpstore 3789ca5b6ccd21a528374f0fb8595 |
| sha256 | f52b8dbffaa9b57910b3c369c384f7ccfe8d696e05e7a8a7f0da0db5540949c2 | 2afd179fe67ceee14c76f92c8f76cad23130fa075d1d5678e242a0d3d52 f52b8dbffaa9b57910b3c369c384f7ccfe8d696e05e7a8a7f0da0db5540949c2 Acer `UEFI shell` mm,dmpstore b0af2158f11535d8458b8497a35e9 |
| sha256 | f75456cd23e492a078b3a81ffbbe262a1511ac9480c4f397e3d4be3b4ce5a455 | a5b6ccd21a528374f0fb85958516966db9331ca68923577352b0a4b45b7 f75456cd23e492a078b3a81ffbbe262a1511ac9480c4f397e3d4be3b4ce5a455 Dell `UEFI shell` mm,dmpstore 113a80eac88190d96832cd50c9ea8 |
| sha256 | f89cdf53d55d70fea31723f52d6b816937aebe2a2212ddcde7e3732e39c1fbfe | 0eac88190d96832cd50c9ea8de3bd6e08d8bcae2e6cea738eb73f64c5d7 f89cdf53d55d70fea31723f52d6b816937aebe2a2212ddcde7e3732e39c1fbfe Dell `UEFI shell` mm,dmpstore 3789ca5b6ccd21a528374f0fb8595 |
| sha256 | fb68dfe907b99c23e97f98518d5e1079312d3981df036bb64d4682fe6fff83b5 | a5b6ccd21a528374f0fb85958516966db9331ca68923577352b0a4b45b7 fb68dfe907b99c23e97f98518d5e1079312d3981df036bb64d4682fe6fff83b5 Dell `UEFI shell` mm,dmpstore b0af2158f11535d8458b8497a35e9 |
From the original article
3 min read at kb.cert.orgOverview Vendor-signed UEFI Shell applications may allow an attacker to bypass Secure Boot protections by abusing commands such as mm (Memory Modify).
kb.cert.org
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.