github - ghsa-7xfj-4r7x-3733

ghsa-7xfj-4r7x-3733

Vulnerability from github

Published

2025-01-14 15:30

Modified

2025-01-21 21:30

Severity ?

6.5 (Medium) - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N

Details

Howyar UEFI Application "Reloader" (32-bit and 64-bit) is vulnerable to execution of unsigned software in a hardcoded path.

Show details on source website

To clipboard

{
  "affected": [],
  "aliases": [
    "CVE-2024-7344"
  ],
  "database_specific": {
    "cwe_ids": [
      "CWE-347"
    ],
    "github_reviewed": false,
    "github_reviewed_at": null,
    "nvd_published_at": "2025-01-14T14:15:34Z",
    "severity": "MODERATE"
  },
  "details": "Howyar UEFI Application \"Reloader\"  (32-bit and 64-bit)  is vulnerable to execution of unsigned software in a hardcoded path.",
  "id": "GHSA-7xfj-4r7x-3733",
  "modified": "2025-01-21T21:30:50Z",
  "published": "2025-01-14T15:30:54Z",
  "references": [
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-7344"
    },
    {
      "type": "WEB",
      "url": "https://uefi.org/revocationlistfile"
    },
    {
      "type": "WEB",
      "url": "https://uefi.org/specs/UEFI/2.10/03_Boot_Manager.html"
    },
    {
      "type": "WEB",
      "url": "https://uefi.org/specs/UEFI/2.10/32_Secure_Boot_and_Driver_Signing.html"
    },
    {
      "type": "WEB",
      "url": "https://www.eset.com/blog/enterprise/preparing-for-uefi-bootkits-eset-discovery-shows-the-importance-of-cyber-intelligence"
    },
    {
      "type": "WEB",
      "url": "https://www.kb.cert.org/vuls/id/529659"
    },
    {
      "type": "WEB",
      "url": "https://www.welivesecurity.com/en/eset-research/under-cloak-uefi-secure-boot-introducing-cve-2024-7344"
    }
  ],
  "schema_version": "1.4.0",
  "severity": [
    {
      "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N",
      "type": "CVSS_V3"
    }
  ]
}

CVE-2024-7344 (GCVE-0-2024-7344)

Vulnerability from cvelistv5

Published

2025-01-14 13:29

Modified

2025-09-15 15:36

Severity ?

CWE

Summary

Howyar UEFI Application "Reloader" (32-bit and 64-bit) is vulnerable to execution of unsigned software in a hardcoded path.

References

URL

Tags

	https://uefi.org/revocationlistfile
	https://uefi.org/specs/UEFI/2.10/32_Secure_Boot_and_Driver_Signing.html
	https://uefi.org/specs/UEFI/2.10/03_Boot_Manager.html
	https://www.eset.com/blog/enterprise/preparing-for-uefi-bootkits-eset-discovery-shows-the-importance-of-cyber-intelligence/

Impacted products

Vendor

Product

Version

Version: * < 11.2.023-20240927

	Greenware Technologies	GreenGuard	Version: * < 10.2.023-20240927
	Howyar Technologies	SysReturn (32-bit and 64-bit)	Version: * < 10.2.02320240919
	SANFONG	SANFONG EZ-Back System	Version: * < 10.3.024-20241127
	CES Taiwan	CES NeoImpact	Version: * < 10.1.024-20241127
	SignalComputer	HDD King	Version: * < 10.3.021-20241127

Show details on NVD website

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2025-01-14T15:02:40.649Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "url": "https://www.kb.cert.org/vuls/id/529659"
          }
        ],
        "title": "CVE Program Container"
      },
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "LOCAL",
              "availabilityImpact": "HIGH",
              "baseScore": 8.2,
              "baseSeverity": "HIGH",
              "confidentialityImpact": "HIGH",
              "integrityImpact": "HIGH",
              "privilegesRequired": "HIGH",
              "scope": "CHANGED",
              "userInteraction": "NONE",
              "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2024-7344",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-09-15T15:36:06.054303Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-09-15T15:36:17.748Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "references": [
          {
            "url": "https://www.kb.cert.org/vuls/id/529659"
          },
          {
            "url": "https://www.welivesecurity.com/en/eset-research/under-cloak-uefi-secure-boot-introducing-cve-2024-7344/"
          }
        ],
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "SmartRecovery",
          "vendor": "Radix",
          "versions": [
            {
              "lessThan": "11.2.023-20240927",
              "status": "affected",
              "version": "*",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "GreenGuard",
          "vendor": "Greenware Technologies",
          "versions": [
            {
              "lessThan": "10.2.023-20240927",
              "status": "affected",
              "version": "*",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "SysReturn (32-bit and 64-bit)",
          "vendor": "Howyar Technologies",
          "versions": [
            {
              "lessThan": "10.2.02320240919",
              "status": "affected",
              "version": "*",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "SANFONG EZ-Back System",
          "vendor": "SANFONG",
          "versions": [
            {
              "lessThan": "10.3.024-20241127",
              "status": "affected",
              "version": "*",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "CES NeoImpact",
          "vendor": "CES Taiwan",
          "versions": [
            {
              "lessThan": "10.1.024-20241127",
              "status": "affected",
              "version": "*",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "HDD King",
          "vendor": "SignalComputer",
          "versions": [
            {
              "lessThan": "10.3.021-20241127",
              "status": "affected",
              "version": "*",
              "versionType": "custom"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "value": "Thanks to Martin Smolar of ESET"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "Howyar UEFI Application \"Reloader\"  (32-bit and 64-bit)  is vulnerable to execution of unsigned software in a hardcoded path."
        }
      ],
      "metrics": [
        {
          "other": {
            "content": {
              "id": "CVE-2024-7344",
              "schemaVersion": "1-0-1",
              "selections": [
                {
                  "name": "Exploitation",
                  "namespace": "ssvc",
                  "values": [
                    "Public PoC"
                  ],
                  "version": "1.1.0"
                },
                {
                  "name": "Automatable",
                  "namespace": "ssvc",
                  "values": [
                    "no"
                  ],
                  "version": "1.0.0"
                },
                {
                  "name": "Technical Impact",
                  "namespace": "ssvc",
                  "values": [
                    "total"
                  ],
                  "version": "1.0.0"
                }
              ],
              "timestamp": "2025-01-14T00:00:00.000Z"
            },
            "type": "ssvc"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "CWE-426: Untrusted Search Path",
              "lang": "en"
            }
          ]
        },
        {
          "descriptions": [
            {
              "description": "CWE-347: Lack/Improper Verification of Cryptographic Signature",
              "lang": "en"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2025-01-14T14:50:21.961Z",
        "orgId": "37e5125f-f79b-445b-8fad-9564f167944b",
        "shortName": "certcc"
      },
      "references": [
        {
          "url": "https://uefi.org/revocationlistfile"
        },
        {
          "url": "https://uefi.org/specs/UEFI/2.10/32_Secure_Boot_and_Driver_Signing.html"
        },
        {
          "url": "https://uefi.org/specs/UEFI/2.10/03_Boot_Manager.html"
        },
        {
          "url": "https://www.eset.com/blog/enterprise/preparing-for-uefi-bootkits-eset-discovery-shows-the-importance-of-cyber-intelligence/"
        }
      ],
      "source": {
        "discovery": "EXTERNAL"
      },
      "title": "Howyar UEFI Application \"Reloader\"  (32-bit and 64-bit)  is vulnerable to execution of unsigned software in a hardcoded path.",
      "x_generator": {
        "engine": "VINCE 3.0.11",
        "env": "prod",
        "origin": "https://cveawg.mitre.org/api/cve/CVE-2024-7344"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "37e5125f-f79b-445b-8fad-9564f167944b",
    "assignerShortName": "certcc",
    "cveId": "CVE-2024-7344",
    "datePublished": "2025-01-14T13:29:56.915Z",
    "dateReserved": "2024-07-31T16:05:09.477Z",
    "dateUpdated": "2025-09-15T15:36:17.748Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

Log in or create an account to share your comment.

Tags

Taxonomy of the tags.

All sightings related to this event Export sightings related to this event

Sightings

Author	Source	Type	Date

Nomenclature

Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
Confirmed: The vulnerability is confirmed from an analyst perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
Patched: This vulnerability was successfully patched by the user reporting the sighting.
Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
Not confirmed: The user expresses doubt about the veracity of the vulnerability.
Not patched: This vulnerability was not successfully patched by the user reporting the sighting.