PT-2022-4106 · New Horizon Datasys+3 · New Horizon Datasys Bootloaders+3

Jesse Michael + 1 · Published 2022-08-09 · Updated 2026-04-22 · CVE-2022-34302

Positive Technologies (AI Summary)

CVSS v2.0

7.2

High

Base vector

AV:L/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions New Horizon Datasys bootloaders before 2022-06-01

Description A flaw was found in the bootloaders, allowing an attacker to bypass or tamper with Secure Boot protections. To load and execute arbitrary code in the pre-boot stage, an attacker needs to replace the existing signed bootloader with this one, requiring access to the EFI System Partition for booting using external media. The vulnerability is related to errors in security settings, which can be exploited to bypass existing security restrictions.

Recommendations For versions before 2022-06-01, consider restricting access to the EFI System Partition to minimize the risk of exploitation. As a temporary workaround, avoid using external media for booting until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Weakness Enumeration

CWE-254

Related Identifiers

ALSA-2023:2487

BDU:2022-04945

CVE-2022-34302

RHSA-2023:2487

RHSA-2023_2487

Affected Products

Almalinux

New Horizon Datasys Bootloaders

Red Hat

Windows

References · 30

• https://nvd.nist.gov/vuln/detail/CVE-2022-34302 · Security Note
• https://bdu.fstec.ru/vul/2022-04945 · Security Note
• https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2022-34302 · Vendor Advisory
• https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-34302 · Vendor Advisory
• https://osv.dev/vulnerability/ALSA-2023:2487 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2022-34302 · Security Note
• https://errata.almalinux.org/9/ALSA-2023-2487.html · Vendor Advisory
• https://linux.oracle.com/errata/ELSA-2023-2487.html · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-34302 · Security Note
• https://osv.dev/vulnerability/CVE-2022-34302 · Vendor Advisory
• https://eclypsium.com/2022/08/11/vulnerable-bootloaders-2022 · Note
• https://kb.cert.org/vuls/id/309662 · Note
• https://t.me/true_secator/3298 · Telegram Post
• https://access.redhat.com/errata/RHSA-2023:2487 · Note
• https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01001.html · Note