Ransomwarehigh
200,000 Linux systems from Framework are shipped with signed UEFI components vulnerable to Secure Boot bypass
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2022-34302 | New Horizon Datasys bootloaders before 2022-06-01: An attacker may use this bootloader to bypass or tamper with Secure Boot protections. In order to load and execute arbitrary code… | 6.7 | 1% | ||
| CVE-2023-48733 | An insecure default to allow UEFI Shell in EDK2 was left enabled in Ubuntu's EDK2 | 6.7 | <1% | ||
| CVE-2024-7344 | Howyar UEFI Application "Reloader" (32-bit and 64-bit) is vulnerable to execution of unsigned software in a hardcoded path | 8.2 | 1% | PoC |
From the original article
2 min read at securityaffairs.com
About 200K Linux systems from Framework shipped with signed UEFI components vulnerable to Secure Boot bypass, allowing bootkit installation and persistence. Firmware security company Eclypsium warns that about 200,000 Linux systems from Framework are shipped with signed UEFI components vulnerable to Secure Boot bypass, allowing bootkit installation and persistence.
By @securityaffairs · securityaffairs.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.