PT-2022-4307 · Microsoft+3 · Windows+3

Jesse Michael + 1 · Published 2022-08-09 · Updated 2025-10-15 · CVE-2022-34303

Positive Technologies (AI Summary)

CVSS v3.1

6.7

Medium

Base vector

AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Eurosoft bootloaders versions prior to 2022-06-01

Description A flaw was found in Eurosoft bootloaders that allows an attacker to bypass or tamper with Secure Boot protections. To load and execute arbitrary code in the pre-boot stage, an attacker needs to replace the existing signed bootloader with this bootloader, requiring access to the EFI System Partition for booting using external media. Additionally, there is a security-feature bypass vulnerability that allows attackers to affect the system. A related issue concerns errors in security settings of the Crypto Pro bootloader in Windows, which can be exploited to bypass security restrictions and gain unauthorized access to the system.

Recommendations For Eurosoft bootloaders versions prior to 2022-06-01, consider restricting access to the EFI System Partition to minimize the risk of exploitation. As a temporary workaround, avoid using external media for booting until a patch is available. Restrict access to the Crypto Pro bootloader in Windows to prevent potential bypass of security restrictions. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Weakness Enumeration

CWE-254

Related Identifiers

ALSA-2023:2487

BDU:2022-05163

CVE-2022-34303

RHSA-2023:2487

RHSA-2023_2487

Affected Products

Almalinux

Eurosoft Bootloaders

Red Hat

Windows

References · 28

• https://osv.dev/vulnerability/ALSA-2023:2487 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2022-34303 · Security Note
• https://osv.dev/vulnerability/CVE-2022-34303 · Vendor Advisory
• https://bdu.fstec.ru/vul/2022-05163 · Security Note
• https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-34303 · Vendor Advisory
• https://errata.almalinux.org/9/ALSA-2023-2487.html · Vendor Advisory
• https://linux.oracle.com/errata/ELSA-2023-2487.html · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-34303 · Security Note
• https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2022-34303 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-34303 · Security Note
• https://eclypsium.com/2022/08/11/vulnerable-bootloaders-2022 · Note
• https://kb.cert.org/vuls/id/309662 · Note
• https://t.me/true_secator/3298 · Telegram Post
• https://bugzilla.redhat.com/2120701 · Note
• https://bugzilla.redhat.com/2120699 · Note