CVE-2024-7344

HighCVSS 8.2/10Last modified Jun 17, 2026

Description

Howyar UEFI Application "Reloader" (32-bit and 64-bit) is vulnerable to execution of unsigned software in a hardcoded path.

Metrics

CVSS 3.1 8.2/10CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H

Weakness enumeration

CWE-347

Affected software

Vendor	Product	Versions
Radix	SmartRecovery	< 11.2.023-20240927
Greenware Technologies	GreenGuard	< 10.2.023-20240927
Howyar Technologies	SysReturn (32-bit and 64-bit)	< 10.2.02320240919
SANFONG	SANFONG EZ-Back System	< 10.3.024-20241127
CES Taiwan	CES NeoImpact	< 10.1.024-20241127
SignalComputer	HDD King	< 10.3.021-20241127

References

https://uefi.org/revocationlistfilePatch
https://uefi.org/specs/UEFI/2.10/03_Boot_Manager.htmlRelated
https://uefi.org/specs/UEFI/2.10/32_Secure_Boot_and_Driver_Signing.htmlRelated
https://www.eset.com/blog/enterprise/preparing-for-uefi-bootkits-eset-discovery-shows-the-importance-of-cyber-intelligence/Related
https://www.kb.cert.org/vuls/id/529659Third Party Advisory, US Government Resource
https://www.kb.cert.org/vuls/id/529659Third Party Advisory, US Government Resource
https://www.welivesecurity.com/en/eset-research/under-cloak-uefi-secure-boot-introducing-cve-2024-7344/Exploit, Mitigation, Third Party Advisory

Timeline

Published: Jan 14, 2025
Last modified: Jun 17, 2026
NVD status: Analyzed

Related CVEs from 2024

CVE-2024-73459.6Local ABL Client bypass of the required PASOE security checks may allow an attacker to commit unauthorized code injection into Multi-Session CVE-2024-73464.8Host name validation for TLS certificates is bypassed when the installed OpenEdge default certificates are used to perform the TLS handshake CVE-2024-73474.7NGINX Open Source and NGINX Plus have a vulnerability in the ngx_http_mp4_module, which might allow an attacker to over-read NGINX worker me CVE-2024-73487.5Time-of-check Time-of-use (TOCTOU) race condition in pg_dump in PostgreSQL allows an object creator to execute arbitrary SQL functions as th CVE-2024-73497.2The LifterLMS – WP LMS for eLearning, Online Courses, & Quizzes plugin for WordPress is vulnerable to blind SQL Injection via the 'order' pa CVE-2024-73509.8The Appointment Booking Calendar Plugin and Online Scheduling Plugin – BookingPress plugin for WordPress is vulnerable to authentication byp CVE-2024-73517.2The Simple Job Board plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 2.12.3 via deserializa CVE-2024-73527.8PDF-XChange Editor PDF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to e CVE-2024-73535.4The Accept Stripe Payments plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's accept_stripe_payment_ng short CVE-2024-73546.1The Ninja Forms WordPress plugin before 3.8.11 does not escape an URL before outputting it back in an attribute, leading to a Reflected Cro CVE-2024-73555.4The Organization chart plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘title_input’ and 'node_description' parame CVE-2024-73565.4The Zephyr Project Manager plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘filename’ parameter in all versions up