Vulnerability · Published Jan 14, 2025 · Assigned by certcc
CVE-2024-7344Howyar UEFI Application "Reloader" (32-bit and 64-bit) is vulnerable to execution of unsigned software in a hardcoded path.
High 8.2
In plain English
A high-severity security flaw in CES NeoImpact from CES Taiwan. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 1.1% (higher than 65% of all known vulnerabilities). Ready-made attack tooling exists: public proof-of-concept code.
Severity (CVSS 3.1)8.2High
Exploit odds (30 days)1.1%top 34.8% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack tooling1Public PoC
Official description
Howyar UEFI Application "Reloader" (32-bit and 64-bit) is vulnerable to execution of unsigned software in a hardcoded path.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Radix | SmartRecovery | * – before 11.2.023-20240927 |
| Greenware Technologies | GreenGuard | * – before 10.2.023-20240927 |
| Howyar Technologies | SysReturn (32-bit and 64-bit) | * – before 10.2.02320240919 |
| SANFONG | SANFONG EZ-Back System | * – before 10.3.024-20241127 |
| CES Taiwan | CES NeoImpact | * – before 10.1.024-20241127 |
| SignalComputer | HDD King | * – before 10.3.021-20241127 |
References
- https://uefi.org/revocationlistfile
- https://uefi.org/specs/UEFI/2.10/32_Secure_Boot_and_Driver_Signing.html
- https://uefi.org/specs/UEFI/2.10/03_Boot_Manager.html
- https://www.eset.com/blog/enterprise/preparing-for-uefi-bootkits-eset-discovery-shows-the-importance-of-cyber-intelligence/
- https://www.kb.cert.org/vuls/id/529659
- https://www.welivesecurity.com/en/eset-research/under-cloak-uefi-secure-boot-introducing-cve-2024-7344/