New UEFI Secure Boot Vulnerability Could Allow Attackers to Load Malicious Bootkits

Summary: A recently discovered vulnerability (CVE-2024-7344) in UEFI systems could allow attackers to bypass Secure Boot protections, enabling the execution of untrusted code during system boot. The flaw affects several real-time system recovery software suites and could lead to the deployment of malicious UEFI bootkits. Despite being patched, the incident raises concerns about the security practices of third-party UEFI software vendors.

Threat Actor: Unknown | unknown
Victim: Various UEFI systems | various UEFI systems

Keypoints :

• The vulnerability allows loading of unsigned UEFI binaries, bypassing Secure Boot protections.
• Attackers could gain persistent access to systems, potentially loading malicious kernel extensions.
• Responsible disclosure led to a timely patch, but concerns remain about the prevalence of unsafe signed UEFI binaries.