Описание
Multiple Microsoft-sigend UEFI SHIM bootloaders are vulnerable to SecureBoot bypass. An attacker with administrative privileges or the ability to modify the boot process could use one of the vulnerable shim bootloaders to bypass Secure Boot protections and execute arbitrary code before the operating system loads. Specific UEFI DBX update is required to block these vulnerable boot loaders.
A flaw was found in multiple versions of UEFI SHIM bootloaders and related products. This vulnerability allows an attacker to bypass SecureBoot due to a lack of enforcement and validation of Secure Boot Advanced Targeting (SBAT). A successful bypass of SecureBoot could allow unauthorized code to execute during the boot process, compromising the system's integrity and security.
Отчет
This vulnerability is rated as an Important severity flaw because an adversary with administrative privileges or physical access to host firmware can compromise the chain of trust by loading vulnerable third-party bootloaders that fail to enforce SBAT policies. Red Hat Enterprise Linux does not distribute the affected third-party binaries, but systems relying on standard UEFI Secure Boot infrastructure remain exposed to boot chain manipulation. Successful exploitation enables unauthorized binary execution early in the boot lifecycle before operating system kernel protections become active.
Дополнительная информация
Статус:
EPSS
7.6 High
CVSS3
Связанные уязвимости
Multiple Microsoft-sigend UEFI SHIM bootloaders are vulnerable to SecureBoot bypass. An attacker with administrative privileges or the ability to modify the boot process could use one of the vulnerable shim bootloaders to bypass Secure Boot protections and execute arbitrary code before the operating system loads. Specific UEFI DBX update is required to block these vulnerable boot loaders.
Multiple Microsoft-sigend UEFI SHIM bootloaders are vulnerable to Secu ...
Multiple Microsoft-sigend UEFI SHIM bootloaders are vulnerable to SecureBoot bypass. An attacker with administrative privileges or the ability to modify the boot process could use one of the vulnerable shim bootloaders to bypass Secure Boot protections and execute arbitrary code before the operating system loads. Specific UEFI DBX update is required to block these vulnerable boot loaders.
Уязвимость защитного механизма UEFI Secure Boot операционных систем Windows, позволяющая нарушителю обойти ограничения безопасности и выполнить произвольный код
EPSS
7.6 High
CVSS3