Every CVESearch/Get API key

CVE-2022-34302

A flaw was found in New Horizon Datasys bootloaders before 2022-06-01. An attacker may use this...

6.7 MediumPublic exploit

CVE-2022-34302 is a medium vulnerability (CVSS 6.7) in Horizondatasys Uefi Bootloader, published August 26, 2022. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 1.09%, the 65th percentile. No source names a fixed version.

Severity
6.7 MediumCVSS 3.1, NVD
Exploit chance
1.09%EPSS, 65th percentile
Exploitation
None known1 public exploit
Fixed in
No fix listedNo source names one

Description

A flaw was found in New Horizon Datasys bootloaders before 2022-06-01. An attacker may use this bootloader to bypass or tamper with Secure Boot protections. In order to load and execute arbitrary code in the pre-boot stage, an attacker simply needs to replace the existing signed bootloader currently in use with this bootloader. Access to the EFI System Partition is required for booting using external media.

Attack profile

How easy it is to exploit

Attack vector
Local
Complexity
Low
Privileges needed
High
User interaction
None

What an attacker can affect

Confidentiality
High
Integrity
High
Availability
High

Exploit likelihood

1.09%Down 1.4 points since Aug 27, 2022
90%50%10%1%

Affected products

Affected packages

Affected packages
PackageAffectedFixed
fwupd
AlmaLinux:9
From an advisory covering 4 CVEs
before 1.8.10-2.el9.alma
1.8.10-2.el9.alma
fwupd-devel
AlmaLinux:9
From an advisory covering 4 CVEs
before 1.8.10-2.el9.alma
1.8.10-2.el9.alma
fwupd-plugin-flashrom
AlmaLinux:9
From an advisory covering 4 CVEs
before 1.8.10-2.el9.alma
1.8.10-2.el9.alma
fwupd-debuginfo
Red Hat:enterprise_linux:9::appstream
From an advisory covering 4 CVEs
before 0:1.8.10-2.el9
0:1.8.10-2.el9
fwupd-debugsource
Red Hat:enterprise_linux:9::appstream
From an advisory covering 4 CVEs
before 0:1.8.10-2.el9
0:1.8.10-2.el9
fwupd-plugin-flashrom
Red Hat:enterprise_linux:9::appstream
From an advisory covering 4 CVEs
before 0:1.8.10-2.el9
0:1.8.10-2.el9
fwupd-plugin-flashrom-debuginfo
Red Hat:enterprise_linux:9::appstream
From an advisory covering 4 CVEs
before 0:1.8.10-2.el9
0:1.8.10-2.el9
fwupd-tests-debuginfo
Red Hat:enterprise_linux:9::appstream
From an advisory covering 4 CVEs
before 0:1.8.10-2.el9
0:1.8.10-2.el9
fwupd
Red Hat:enterprise_linux:9::baseos
From an advisory covering 4 CVEs
before 0:1.8.10-2.el9
0:1.8.10-2.el9
fwupd-debuginfo
Red Hat:enterprise_linux:9::baseos
From an advisory covering 4 CVEs
before 0:1.8.10-2.el9
0:1.8.10-2.el9
Show 8 moreShow less
Affected packages
PackageAffectedFixed
fwupd-debugsource
Red Hat:enterprise_linux:9::baseos
From an advisory covering 4 CVEs
before 0:1.8.10-2.el9
0:1.8.10-2.el9
fwupd-plugin-flashrom-debuginfo
Red Hat:enterprise_linux:9::baseos
From an advisory covering 4 CVEs
before 0:1.8.10-2.el9
0:1.8.10-2.el9
fwupd-tests-debuginfo
Red Hat:enterprise_linux:9::baseos
From an advisory covering 4 CVEs
before 0:1.8.10-2.el9
0:1.8.10-2.el9
fwupd-debuginfo
Red Hat:enterprise_linux:9::crb
From an advisory covering 4 CVEs
before 0:1.8.10-2.el9
0:1.8.10-2.el9
fwupd-debugsource
Red Hat:enterprise_linux:9::crb
From an advisory covering 4 CVEs
before 0:1.8.10-2.el9
0:1.8.10-2.el9
fwupd-devel
Red Hat:enterprise_linux:9::crb
From an advisory covering 4 CVEs
before 0:1.8.10-2.el9
0:1.8.10-2.el9
fwupd-plugin-flashrom-debuginfo
Red Hat:enterprise_linux:9::crb
From an advisory covering 4 CVEs
before 0:1.8.10-2.el9
0:1.8.10-2.el9
fwupd-tests-debuginfo
Red Hat:enterprise_linux:9::crb
From an advisory covering 4 CVEs
before 0:1.8.10-2.el9
0:1.8.10-2.el9

Public exploits

Links only. Every CVE stores no exploit code.

Public exploits
SourceLinkDate
PoC in GitHubTheMalwareGuardian/CVE-2022-343022026-09-07

What each source reports

NVD Score used6.7

A flaw was found in New Horizon Datasys bootloaders before 2022-06-01. An attacker may use this bootloader to bypass or tamper with Secure Boot protections. In order to load and execute arbitrary code in the pre-boot stage, an attacker simply needs to replace the existing signed bootloader currently in use with this bootloader. Access to the EFI System Partition is required for booting using external media.

Record
CVE-2022-34302
CVSS 3.1
6.7 MediumCVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
CVE ListNo score

A flaw was found in New Horizon Datasys bootloaders before 2022-06-01. An attacker may use this bootloader to bypass or tamper with Secure Boot protections. In order to load and execute arbitrary code in the pre-boot stage, an attacker simply needs to replace the existing signed bootloader currently in use with this bootloader. Access to the EFI System Partition is required for booting using external media.

Record
CVE-2022-34302
Updated
2026-11-02
EUVDEUVD-2022-37259No score

A flaw was found in New Horizon Datasys bootloaders before 2022-06-01. An attacker may use this bootloader to bypass or tamper with Secure Boot protections. In order to load and execute arbitrary code in the pre-boot stage, an attacker simply needs to replace the existing signed bootloader currently in use with this bootloader. Access to the EFI System Partition is required for booting using external media.

Record
EUVD-2022-37259
Updated
2026-11-03
GitHub AdvisoriesGHSA-77q2-m9gq-g9826.7

A flaw was found in New Horizon Datasys bootloaders before 2022-06-01. An attacker may use this...

A flaw was found in New Horizon Datasys bootloaders before 2022-06-01. An attacker may use this bootloader to bypass or tamper with Secure Boot protections. In order to load and execute arbitrary code in the pre-boot stage, an attacker simply needs to replace the existing signed bootloader currently in use with this bootloader. Access to the EFI System Partition is required for booting using external media.

Record
GHSA-77q2-m9gq-g982
CVSS 3.1
6.7 MediumCVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2023:24877.5

Red Hat Security Advisory: fwupd security and bug fix update

Record
RHSA-2023:2487
CVSS 3.1
7.5 HighCVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H
Updated
2026-11-02
OSVALSA-2023:2487No score

Moderate: fwupd security and bug fix update

The fwupd packages provide a service that allows session software to update device firmware.

Security Fix(es):

  • fwupd: world readable password in /etc/fwupd/redfish.conf (CVE-2022-3287)
  • shim: 3rd party shim allow secure boot bypass (CVE-2022-34301)
  • shim: 3rd party shim allow secure boot bypass (CVE-2022-34302)
  • shim: 3rd party shim allow secure boot bypass (CVE-2022-34303)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.

Record
ALSA-2023:2487
Updated
2026-11-02

History

History
RecordedChangedSources
affected, facts
aliasesEUVD
first indexedCVE List, GitHub Advisories, NVD, OSV, PoC in GitHub

Dates are when Every CVE recorded each change. Upstream dates may differ.

References

Show 28 moreShow less
PagesAll vulnerabilitiesBrowseDocsSourcesGuideGet API key
MoveEnter Open