PT-2023-2625 · Microsoft · Windows

Martin Smolar + 2 · Published 2023-05-09 · Updated 2026-03-22 · CVE-2023-24932

Positive Technologies · (AI Summary)

CVSS v3.1

6.7

Medium

AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Windows versions prior to the fixed version

Description A security-feature bypass vulnerability allows attackers to affect the system. The issue is related to Secure Boot and can be exploited to bypass security mechanisms. It is estimated that many versions of Windows are affected, including the latest builds of Windows 11. The vulnerability can be exploited using a LAN cable and a second notebook, allowing attackers to decrypt the disk.

Recommendations As a temporary workaround, consider updating the Windows Boot Manager revocations for Secure Boot changes. Apply the manual steps required for the updated mitigation included in the April 9 updates. Update the core OS and WinRE before proceeding with the rest of the CVE-2023-24932 remediations. For Windows, update to the latest version that includes the fix for this issue, as provided in the July 9 Patch Tuesday release.

Fix

Incorrect Authorization

Weakness Enumeration

CWE-863

CWE-254

Related Identifiers

BDU:2023-02465

CVE-2023-24932

Affected Products

Windows

References · 61

• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-24932 · Security Note
• https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-24932 · Vendor Advisory
• https://bdu.fstec.ru/vul/2023-02465 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2023-24932 · Security Note
• https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2023-24932 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2023-24932 · Vendor Advisory
• https://reddit.com/r/sysadmin/comments/1ne2gnh/microsoft_secureboot_signing_certificate_will · Reddit Post
• https://t.me/secharvester/13773 · Telegram Post
• https://reddit.com/r/sysadmin/comments/1ne3vto/microsoft_secureboot_signing_certificate_will · Reddit Post
• https://twitter.com/Marcin_Pudelko/status/1752309327564624195 · Twitter Post
• https://reddit.com/r/Windows11/comments/1h9eb96/how_do_i_make_a_recovery_disk_in_light_of · Reddit Post
• https://reddit.com/r/WindowsHelp/comments/1hev070/how_do_i_make_a_recovery_disk_in_light_of · Reddit Post
• https://twitter.com/windowsforum/status/1889385423782224331 · Twitter Post
• https://twitter.com/windowsforum/status/1889684870600749264 · Twitter Post
• https://t.me/sysadm_in_channel/4617 · Telegram Post