GCVE Workshop - 22 September 2026 (14:00-18:00), Luxembourg Before The Vulnopticon Conference - Registration

CVE-2024-7344 (GCVE-0-2024-7344)

Vulnerability from cvelistv5 – Published: 2025-01-14 13:29 – Updated: 2025-09-15 15:36
VLAI
Title
Howyar UEFI Application "Reloader" (32-bit and 64-bit) is vulnerable to execution of unsigned software in a hardcoded path.
Summary
Howyar UEFI Application "Reloader" (32-bit and 64-bit) is vulnerable to execution of unsigned software in a hardcoded path.
Severity
8.2 (High)
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H
SSVC
Exploitation: Public PoC Automatable: no Technical Impact: total
certcc (v1-0-1)
Decision recorded 2025-01-14 00:00 UTC
Exploitation: none Automatable: no Technical Impact: total
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2025-09-15 15:36 UTC
CWE
  • CWE-426 - Untrusted Search Path
  • CWE-347 - Lack/Improper Verification of Cryptographic Signature
Assigner
References
Impacted products
Vendor Product Version CPE status
Radix SmartRecovery Affected: * , < 11.2.023-20240927 (custom)
guessed Create a notification for this product.
Greenware Technologies GreenGuard Affected: * , < 10.2.023-20240927 (custom)
guessed Create a notification for this product.
Howyar Technologies SysReturn (32-bit and 64-bit) Affected: * , < 10.2.02320240919 (custom)
guessed Create a notification for this product.
SANFONG SANFONG EZ-Back System Affected: * , < 10.3.024-20241127 (custom)
guessed Create a notification for this product.
CES Taiwan CES NeoImpact Affected: * , < 10.1.024-20241127 (custom)
guessed Create a notification for this product.
SignalComputer HDD King Affected: * , < 10.3.021-20241127 (custom)
guessed Create a notification for this product.
Credits
Thanks to Martin Smolar of ESET
Show details on NVD website
To clipboard 

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2025-01-14T15:02:40.649Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "url": "https://www.kb.cert.org/vuls/id/529659"
          }
        ],
        "title": "CVE Program Container"
      },
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "LOCAL",
              "availabilityImpact": "HIGH",
              "baseScore": 8.2,
              "baseSeverity": "HIGH",
              "confidentialityImpact": "HIGH",
              "integrityImpact": "HIGH",
              "privilegesRequired": "HIGH",
              "scope": "CHANGED",
              "userInteraction": "NONE",
              "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2024-7344",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-09-15T15:36:06.054303Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-09-15T15:36:17.748Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "references": [
          {
            "url": "https://www.kb.cert.org/vuls/id/529659"
          },
          {
            "url": "https://www.welivesecurity.com/en/eset-research/under-cloak-uefi-secure-boot-introducing-cve-2024-7344/"
          }
        ],
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "SmartRecovery",
          "vendor": "Radix",
          "versions": [
            {
              "lessThan": "11.2.023-20240927",
              "status": "affected",
              "version": "*",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "GreenGuard",
          "vendor": "Greenware Technologies",
          "versions": [
            {
              "lessThan": "10.2.023-20240927",
              "status": "affected",
              "version": "*",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "SysReturn (32-bit and 64-bit)",
          "vendor": "Howyar Technologies",
          "versions": [
            {
              "lessThan": "10.2.02320240919",
              "status": "affected",
              "version": "*",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "SANFONG EZ-Back System",
          "vendor": "SANFONG",
          "versions": [
            {
              "lessThan": "10.3.024-20241127",
              "status": "affected",
              "version": "*",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "CES NeoImpact",
          "vendor": "CES Taiwan",
          "versions": [
            {
              "lessThan": "10.1.024-20241127",
              "status": "affected",
              "version": "*",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "HDD King",
          "vendor": "SignalComputer",
          "versions": [
            {
              "lessThan": "10.3.021-20241127",
              "status": "affected",
              "version": "*",
              "versionType": "custom"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "value": "Thanks to Martin Smolar of ESET"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "Howyar UEFI Application \"Reloader\"  (32-bit and 64-bit)  is vulnerable to execution of unsigned software in a hardcoded path."
        }
      ],
      "metrics": [
        {
          "other": {
            "content": {
              "id": "CVE-2024-7344",
              "schemaVersion": "1-0-1",
              "selections": [
                {
                  "name": "Exploitation",
                  "namespace": "ssvc",
                  "values": [
                    "Public PoC"
                  ],
                  "version": "1.1.0"
                },
                {
                  "name": "Automatable",
                  "namespace": "ssvc",
                  "values": [
                    "no"
                  ],
                  "version": "1.0.0"
                },
                {
                  "name": "Technical Impact",
                  "namespace": "ssvc",
                  "values": [
                    "total"
                  ],
                  "version": "1.0.0"
                }
              ],
              "timestamp": "2025-01-14T00:00:00.000Z"
            },
            "type": "ssvc"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "CWE-426: Untrusted Search Path",
              "lang": "en"
            }
          ]
        },
        {
          "descriptions": [
            {
              "description": "CWE-347: Lack/Improper Verification of Cryptographic Signature",
              "lang": "en"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2025-01-14T14:50:21.961Z",
        "orgId": "37e5125f-f79b-445b-8fad-9564f167944b",
        "shortName": "certcc"
      },
      "references": [
        {
          "url": "https://uefi.org/revocationlistfile"
        },
        {
          "url": "https://uefi.org/specs/UEFI/2.10/32_Secure_Boot_and_Driver_Signing.html"
        },
        {
          "url": "https://uefi.org/specs/UEFI/2.10/03_Boot_Manager.html"
        },
        {
          "url": "https://www.eset.com/blog/enterprise/preparing-for-uefi-bootkits-eset-discovery-shows-the-importance-of-cyber-intelligence/"
        }
      ],
      "source": {
        "discovery": "EXTERNAL"
      },
      "title": "Howyar UEFI Application \"Reloader\"  (32-bit and 64-bit)  is vulnerable to execution of unsigned software in a hardcoded path.",
      "x_generator": {
        "engine": "VINCE 3.0.11",
        "env": "prod",
        "origin": "https://cveawg.mitre.org/api/cve/CVE-2024-7344"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "37e5125f-f79b-445b-8fad-9564f167944b",
    "assignerShortName": "certcc",
    "cveId": "CVE-2024-7344",
    "datePublished": "2025-01-14T13:29:56.915Z",
    "dateReserved": "2024-07-31T16:05:09.477Z",
    "dateUpdated": "2025-09-15T15:36:17.748Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1",
  "vulnerability-lookup:meta": {
    "epss": {
      "cve": "CVE-2024-7344",
      "date": "2026-09-16",
      "epss": "0.01036",
      "percentile": "0.62188"
    },
    "fkie_nvd": {
      "descriptions": "[{\"lang\": \"en\", \"value\": \"Howyar UEFI Application \\\"Reloader\\\"  (32-bit and 64-bit)  is vulnerable to execution of unsigned software in a hardcoded path.\"}]",
      "id": "CVE-2024-7344",
      "lastModified": "2025-01-14T14:15:34.930",
      "published": "2025-01-14T14:15:34.930",
      "references": "[{\"url\": \"https://uefi.org/revocationlistfile\", \"source\": \"cret@cert.org\"}, {\"url\": \"https://uefi.org/specs/UEFI/2.10/03_Boot_Manager.html\", \"source\": \"cret@cert.org\"}, {\"url\": \"https://uefi.org/specs/UEFI/2.10/32_Secure_Boot_and_Driver_Signing.html\", \"source\": \"cret@cert.org\"}, {\"url\": \"https://www.eset.com/blog/enterprise/preparing-for-uefi-bootkits-eset-discovery-shows-the-importance-of-cyber-intelligence/\", \"source\": \"cret@cert.org\"}]",
      "sourceIdentifier": "cret@cert.org",
      "vulnStatus": "Received"
    },
    "nvd": "{\"cve\":{\"id\":\"CVE-2024-7344\",\"sourceIdentifier\":\"cret@cert.org\",\"published\":\"2025-01-14T14:15:34.930\",\"lastModified\":\"2026-06-17T08:19:54.407\",\"vulnStatus\":\"Analyzed\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"Howyar UEFI Application \\\"Reloader\\\"  (32-bit and 64-bit)  is vulnerable to execution of unsigned software in a hardcoded path.\"},{\"lang\":\"es\",\"value\":\"La aplicaci\u00f3n Howyar UEFI Application \\\"Reloader\\\" (32 bits y 64 bits) es vulnerable a la ejecuci\u00f3n de software no firmado en una ruta codificada.\"}],\"affected\":[{\"source\":\"cret@cert.org\",\"affectedData\":[{\"vendor\":\"Radix\",\"product\":\"SmartRecovery\",\"defaultStatus\":\"unaffected\",\"versions\":[{\"version\":\"*\",\"lessThan\":\"11.2.023-20240927\",\"versionType\":\"custom\",\"status\":\"affected\"}]},{\"vendor\":\"Greenware Technologies\",\"product\":\"GreenGuard\",\"defaultStatus\":\"unaffected\",\"versions\":[{\"version\":\"*\",\"lessThan\":\"10.2.023-20240927\",\"versionType\":\"custom\",\"status\":\"affected\"}]},{\"vendor\":\"Howyar Technologies\",\"product\":\"SysReturn (32-bit and 64-bit)\",\"defaultStatus\":\"unaffected\",\"versions\":[{\"version\":\"*\",\"lessThan\":\"10.2.02320240919\",\"versionType\":\"custom\",\"status\":\"affected\"}]},{\"vendor\":\"SANFONG\",\"product\":\"SANFONG EZ-Back System\",\"defaultStatus\":\"unaffected\",\"versions\":[{\"version\":\"*\",\"lessThan\":\"10.3.024-20241127\",\"versionType\":\"custom\",\"status\":\"affected\"}]},{\"vendor\":\"CES Taiwan\",\"product\":\"CES NeoImpact\",\"defaultStatus\":\"unaffected\",\"versions\":[{\"version\":\"*\",\"lessThan\":\"10.1.024-20241127\",\"versionType\":\"custom\",\"status\":\"affected\"}]},{\"vendor\":\"SignalComputer\",\"product\":\"HDD King\",\"defaultStatus\":\"unaffected\",\"versions\":[{\"version\":\"*\",\"lessThan\":\"10.3.021-20241127\",\"versionType\":\"custom\",\"status\":\"affected\"}]}]}],\"metrics\":{\"cvssMetricV31\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H\",\"baseScore\":8.2,\"baseSeverity\":\"HIGH\",\"attackVector\":\"LOCAL\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"HIGH\",\"userInteraction\":\"NONE\",\"scope\":\"CHANGED\",\"confidentialityImpact\":\"HIGH\",\"integrityImpact\":\"HIGH\",\"availabilityImpact\":\"HIGH\"},\"exploitabilityScore\":1.5,\"impactScore\":6.0},{\"source\":\"134c704f-9b21-4f2e-91b3-4a467353bcc0\",\"type\":\"Secondary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H\",\"baseScore\":8.2,\"baseSeverity\":\"HIGH\",\"attackVector\":\"LOCAL\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"HIGH\",\"userInteraction\":\"NONE\",\"scope\":\"CHANGED\",\"confidentialityImpact\":\"HIGH\",\"integrityImpact\":\"HIGH\",\"availabilityImpact\":\"HIGH\"},\"exploitabilityScore\":1.5,\"impactScore\":6.0}],\"ssvcV203\":[{\"source\":\"134c704f-9b21-4f2e-91b3-4a467353bcc0\",\"ssvcData\":{\"timestamp\":\"2025-09-15T15:36:06.054303Z\",\"id\":\"CVE-2024-7344\",\"options\":[{\"exploitation\":\"none\"},{\"automatable\":\"no\"},{\"technicalImpact\":\"total\"}],\"role\":\"CISA Coordinator\",\"version\":\"2.0.3\"}}]},\"weaknesses\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-347\"}]}],\"configurations\":[{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:cs-grp:neo_impact:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"10.1.024-20241127\",\"matchCriteriaId\":\"661C4664-9989-497C-9758-595D667A5E61\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:greenware:greenguard:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"10.2.023-20240927\",\"matchCriteriaId\":\"C26295FA-07B6-42D8-B5E9-7B54FA3D4559\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:howyar:sysreturn:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"10.2.023_20240919\",\"matchCriteriaId\":\"070699E9-BA08-4DFA-B2D7-61289CFDF865\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:radix:smart_recovery:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"11.2.023-20240927\",\"matchCriteriaId\":\"E1D9F1B3-11C7-47FC-972C-017869712582\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:sanfong:ez-back_system:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"10.3.024-20241127\",\"matchCriteriaId\":\"A794B06A-1AAC-49D4-8AD5-813A84B6DA60\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:signalcomputer:hdd_king:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"10.3.021-20241127\",\"matchCriteriaId\":\"FD9C4071-6E0B-472B-89BB-88D324D47534\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:wasay:erecoveryrx:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"8.4.022-20241127\",\"matchCriteriaId\":\"DDA5BBD9-2DCD-4F4B-94A2-28E62180ADA3\"}]}]}],\"references\":[{\"url\":\"https://uefi.org/revocationlistfile\",\"source\":\"cret@cert.org\",\"tags\":[\"Patch\"]},{\"url\":\"https://uefi.org/specs/UEFI/2.10/03_Boot_Manager.html\",\"source\":\"cret@cert.org\",\"tags\":[\"Related\"]},{\"url\":\"https://uefi.org/specs/UEFI/2.10/32_Secure_Boot_and_Driver_Signing.html\",\"source\":\"cret@cert.org\",\"tags\":[\"Related\"]},{\"url\":\"https://www.eset.com/blog/enterprise/preparing-for-uefi-bootkits-eset-discovery-shows-the-importance-of-cyber-intelligence/\",\"source\":\"cret@cert.org\",\"tags\":[\"Related\"]},{\"url\":\"https://www.kb.cert.org/vuls/id/529659\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\",\"US Government Resource\"]},{\"url\":\"https://www.kb.cert.org/vuls/id/529659\",\"source\":\"134c704f-9b21-4f2e-91b3-4a467353bcc0\",\"tags\":[\"Third Party Advisory\",\"US Government Resource\"]},{\"url\":\"https://www.welivesecurity.com/en/eset-research/under-cloak-uefi-secure-boot-introducing-cve-2024-7344/\",\"source\":\"134c704f-9b21-4f2e-91b3-4a467353bcc0\",\"tags\":[\"Exploit\",\"Mitigation\",\"Third Party Advisory\"]}]}}",
    "redhat_vex": {
      "current_release_date": "2026-06-26T00:00:28+00:00",
      "cve": "CVE-2024-7344",
      "id": "CVE-2024-7344",
      "initial_release_date": "2024-01-01T00:00:00+00:00",
      "product_status:known_not_affected": "1",
      "source": "Red Hat CSAF VEX",
      "status": "final",
      "title": "howyar-sysreturn: Howyar UEFI Application \"Reloader\": Unsigned software execution via hardcoded path",
      "url": "https://security.access.redhat.com/data/csaf/v2/vex/2024/cve-2024-7344.json",
      "version": "3"
    },
    "vulnrichment": {
      "containers": "{\"adp\": [{\"title\": \"CVE Program Container\", \"references\": [{\"url\": \"https://www.kb.cert.org/vuls/id/529659\"}], \"providerMetadata\": {\"orgId\": \"af854a3a-2127-422b-91ae-364da2661108\", \"shortName\": \"CVE\", \"dateUpdated\": \"2025-01-14T15:02:40.649Z\"}}, {\"title\": \"CISA ADP Vulnrichment\", \"metrics\": [{\"cvssV3_1\": {\"scope\": \"CHANGED\", \"version\": \"3.1\", \"baseScore\": 8.2, \"attackVector\": \"LOCAL\", \"baseSeverity\": \"HIGH\", \"vectorString\": \"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H\", \"integrityImpact\": \"HIGH\", \"userInteraction\": \"NONE\", \"attackComplexity\": \"LOW\", \"availabilityImpact\": \"HIGH\", \"privilegesRequired\": \"HIGH\", \"confidentialityImpact\": \"HIGH\"}}, {\"other\": {\"type\": \"ssvc\", \"content\": {\"id\": \"CVE-2024-7344\", \"role\": \"CISA Coordinator\", \"options\": [{\"Exploitation\": \"none\"}, {\"Automatable\": \"no\"}, {\"Technical Impact\": \"total\"}], \"version\": \"2.0.3\", \"timestamp\": \"2025-09-15T15:36:06.054303Z\"}}}], \"references\": [{\"url\": \"https://www.kb.cert.org/vuls/id/529659\"}, {\"url\": \"https://www.welivesecurity.com/en/eset-research/under-cloak-uefi-secure-boot-introducing-cve-2024-7344/\"}], \"providerMetadata\": {\"orgId\": \"134c704f-9b21-4f2e-91b3-4a467353bcc0\", \"shortName\": \"CISA-ADP\", \"dateUpdated\": \"2025-01-14T17:08:47.956Z\"}}], \"cna\": {\"title\": \"Howyar UEFI Application \\\"Reloader\\\"  (32-bit and 64-bit)  is vulnerable to execution of unsigned software in a hardcoded path.\", \"source\": {\"discovery\": \"EXTERNAL\"}, \"credits\": [{\"lang\": \"en\", \"value\": \"Thanks to Martin Smolar of ESET\"}], \"metrics\": [{\"other\": {\"type\": \"ssvc\", \"content\": {\"id\": \"CVE-2024-7344\", \"timestamp\": \"2025-01-14T00:00:00.000Z\", \"selections\": [{\"name\": \"Exploitation\", \"values\": [\"Public PoC\"], \"version\": \"1.1.0\", \"namespace\": \"ssvc\"}, {\"name\": \"Automatable\", \"values\": [\"no\"], \"version\": \"1.0.0\", \"namespace\": \"ssvc\"}, {\"name\": \"Technical Impact\", \"values\": [\"total\"], \"version\": \"1.0.0\", \"namespace\": \"ssvc\"}], \"schemaVersion\": \"1-0-1\"}}}], \"affected\": [{\"vendor\": \"Radix\", \"product\": \"SmartRecovery\", \"versions\": [{\"status\": \"affected\", \"version\": \"*\", \"lessThan\": \"11.2.023-20240927\", \"versionType\": \"custom\"}], \"defaultStatus\": \"unaffected\"}, {\"vendor\": \"Greenware Technologies\", \"product\": \"GreenGuard\", \"versions\": [{\"status\": \"affected\", \"version\": \"*\", \"lessThan\": \"10.2.023-20240927\", \"versionType\": \"custom\"}], \"defaultStatus\": \"unaffected\"}, {\"vendor\": \"Howyar Technologies\", \"product\": \"SysReturn (32-bit and 64-bit)\", \"versions\": [{\"status\": \"affected\", \"version\": \"*\", \"lessThan\": \"10.2.02320240919\", \"versionType\": \"custom\"}], \"defaultStatus\": \"unaffected\"}, {\"vendor\": \"SANFONG\", \"product\": \"SANFONG EZ-Back System\", \"versions\": [{\"status\": \"affected\", \"version\": \"*\", \"lessThan\": \"10.3.024-20241127\", \"versionType\": \"custom\"}], \"defaultStatus\": \"unaffected\"}, {\"vendor\": \"CES Taiwan\", \"product\": \"CES NeoImpact\", \"versions\": [{\"status\": \"affected\", \"version\": \"*\", \"lessThan\": \"10.1.024-20241127\", \"versionType\": \"custom\"}], \"defaultStatus\": \"unaffected\"}, {\"vendor\": \"SignalComputer\", \"product\": \"HDD King\", \"versions\": [{\"status\": \"affected\", \"version\": \"*\", \"lessThan\": \"10.3.021-20241127\", \"versionType\": \"custom\"}], \"defaultStatus\": \"unaffected\"}], \"references\": [{\"url\": \"https://uefi.org/revocationlistfile\"}, {\"url\": \"https://uefi.org/specs/UEFI/2.10/32_Secure_Boot_and_Driver_Signing.html\"}, {\"url\": \"https://uefi.org/specs/UEFI/2.10/03_Boot_Manager.html\"}, {\"url\": \"https://www.eset.com/blog/enterprise/preparing-for-uefi-bootkits-eset-discovery-shows-the-importance-of-cyber-intelligence/\"}], \"x_generator\": {\"env\": \"prod\", \"engine\": \"VINCE 3.0.11\", \"origin\": \"https://cveawg.mitre.org/api/cve/CVE-2024-7344\"}, \"descriptions\": [{\"lang\": \"en\", \"value\": \"Howyar UEFI Application \\\"Reloader\\\"  (32-bit and 64-bit)  is vulnerable to execution of unsigned software in a hardcoded path.\"}], \"problemTypes\": [{\"descriptions\": [{\"lang\": \"en\", \"description\": \"CWE-426: Untrusted Search Path\"}]}, {\"descriptions\": [{\"lang\": \"en\", \"description\": \"CWE-347: Lack/Improper Verification of Cryptographic Signature\"}]}], \"providerMetadata\": {\"orgId\": \"37e5125f-f79b-445b-8fad-9564f167944b\", \"shortName\": \"certcc\", \"dateUpdated\": \"2025-01-14T14:50:21.961Z\"}}}",
      "cveMetadata": "{\"cveId\": \"CVE-2024-7344\", \"state\": \"PUBLISHED\", \"dateUpdated\": \"2025-09-15T15:36:17.748Z\", \"dateReserved\": \"2024-07-31T16:05:09.477Z\", \"assignerOrgId\": \"37e5125f-f79b-445b-8fad-9564f167944b\", \"datePublished\": \"2025-01-14T13:29:56.915Z\", \"assignerShortName\": \"certcc\"}",
      "dataType": "CVE_RECORD",
      "dataVersion": "5.1"
    }
  }
}



Log in or create an account to share your comment.




Tags
Taxonomy of the tags.





Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.

Sightings

Author Source Type Date Other

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.


Detection rules are retrieved from Rulezet.


Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.