Malwarehigh
Researchers Uncover UEFI Secure Boot Bypass in 3 Microsoft Signed Boot Loaders
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2022-34301 | CryptoPro Secure Disk bootloaders before 2022-06-01: An attacker may use this bootloader to bypass or tamper with Secure Boot protections. In order to load and execute arbitrary code… | 6.7 | <1% | ||
| CVE-2022-34302 | New Horizon Datasys bootloaders before 2022-06-01: An attacker may use this bootloader to bypass or tamper with Secure Boot protections. In order to load and execute arbitrary code… | 6.7 | 1% |
From the original article
2 min read at thehackernews.com
A security feature bypass vulnerability has been uncovered in three signed third-party Unified Extensible Firmware Interface ( UEFI ) boot loaders that allow bypass of the UEFI Secure Boot feature.
By @TheHackersNews · thehackernews.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.