Signal is active with 2 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
Howyar UEFI Application "Reloader" (32-bit and 64-bit) is vulnerable to execution of unsigned software in a hardcoded path.
Priority
LOW
Exploitation
NONE
PoC
YES
Patch
AVAILABLE
Momentum
NONE
If you run products in this scope, you should treat this CVE as relevant to your environment.
CVE-2024-7344 is a Secure Boot bypass in Microsoft-signed UEFI recovery apps. ESET reported it to CERT/CC in June 2024, starting coordinated disclosure with several vendors.
Post summary
ESET reported CVE‑2024‑7344, a Secure Boot bypass in Microsoft‑signed UEFI recovery apps, to CERT/CC, initiating coordinated disclosure with vendors.
One Microsoft-signed UEFI recovery app with a custom PE loader allowed Secure Boot bypass on a large share of UEFI systems. This flaw is tracked as CVE-2024-7344. #Ransomware #CyberSecurity https://t.co/2BktmQsjmm
Post summary
The tweet announces a new Microsoft‑signed UEFI recovery app flaw (CVE‑2024‑7344) that permits Secure Boot bypass on many UEFI systems, but provides no PoC, exploit code, or patch details.
7 of 7 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | cs-grp | neo_impact | - | - | - |
| App | greenware | greenguard | - | - | - |
| App | howyar | sysreturn | - | - | - |
| App | radix | smart_recovery | - | - | - |
| App | sanfong | ez-back_system | - | - | - |
| App | signalcomputer | hdd_king | - | - | - |
| App | wasay | erecoveryrx | - | - | - |