{"id":"CVE-2022-34302","aliases":["ALSA-2023:2487","EUVD-2022-37259","GHSA-77q2-m9gq-g982","RHSA-2023:2487"],"status":"published","title":"A flaw was found in New Horizon Datasys bootloaders before 2022-06-01. An attacker may use this...","description":"A flaw was found in New Horizon Datasys bootloaders before 2022-06-01. An attacker may use this bootloader to bypass or tamper with Secure Boot protections. In order to load and execute arbitrary code in the pre-boot stage, an attacker simply needs to replace the existing signed bootloader currently in use with this bootloader. Access to the EFI System Partition is required for booting using external media.","severity":{"version":"3.1","score":6.7,"vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-09","score":0.01094,"percentile":0.6574,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":true,"fix_available":false},"published":"2022-08-26T00:00:00Z","modified":"2026-10-29T11:30:56Z","exploits":[{"source":"pocgithub","id":"TheMalwareGuardian/CVE-2022-34302","title":"TheMalwareGuardian/CVE-2022-34302","date":"2026-09-07","url":"https://github.com/TheMalwareGuardian/CVE-2022-34302"}],"affected":[{"source":"osv","ecosystem":"AlmaLinux:9","package":"fwupd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.10-2.el9.alma"}]}],"bundled":4},{"source":"osv","ecosystem":"AlmaLinux:9","package":"fwupd-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.10-2.el9.alma"}]}],"bundled":4},{"source":"osv","ecosystem":"AlmaLinux:9","package":"fwupd-plugin-flashrom","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.10-2.el9.alma"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"fwupd-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.8.10-2.el9"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"fwupd-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.8.10-2.el9"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"fwupd-plugin-flashrom","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.8.10-2.el9"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"fwupd-plugin-flashrom-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.8.10-2.el9"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"fwupd-tests-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.8.10-2.el9"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"fwupd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.8.10-2.el9"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"fwupd-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.8.10-2.el9"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"fwupd-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.8.10-2.el9"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"fwupd-plugin-flashrom-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.8.10-2.el9"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"fwupd-tests-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.8.10-2.el9"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"fwupd-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.8.10-2.el9"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"fwupd-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.8.10-2.el9"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"fwupd-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.8.10-2.el9"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"fwupd-plugin-flashrom-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.8.10-2.el9"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"fwupd-tests-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.8.10-2.el9"}]}],"bundled":4}],"products":[{"vendor":"horizondatasys","product":"uefi_bootloader"},{"vendor":"microsoft","product":"windows_10"},{"vendor":"microsoft","product":"windows_11"},{"vendor":"microsoft","product":"windows_8.1"},{"vendor":"microsoft","product":"windows_rt_8.1"},{"vendor":"microsoft","product":"windows_server_2012"},{"vendor":"microsoft","product":"windows_server_2016"},{"vendor":"microsoft","product":"windows_server_2019"},{"vendor":"microsoft","product":"windows_server_2022"},{"vendor":"redhat","product":"enterprise_linux"}],"references":[{"url":"https://edk2-docs.gitbook.io/understanding-the-uefi-secure-boot-chain/secure_boot_chain_in_uefi/uefi_secure_boot","tags":["x_transferred","Third Party Advisory"]},{"url":"https://www.kb.cert.org/vuls/id/309662","tags":["x_transferred","Third Party Advisory","US Government Resource"]},{"url":"https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01001.html","tags":["x_transferred"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-34302","tags":["advisory"]},{"url":"https://github.com/advisories/GHSA-77q2-m9gq-g982"},{"url":"https://access.redhat.com/errata/RHSA-2023:2487","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-3287","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-34301","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-34302","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-34303","tags":["report"]},{"url":"https://bugzilla.redhat.com/2120687","tags":["report"]},{"url":"https://bugzilla.redhat.com/2120699","tags":["report"]},{"url":"https://bugzilla.redhat.com/2120701","tags":["report"]},{"url":"https://bugzilla.redhat.com/2129904","tags":["report"]},{"url":"https://errata.almalinux.org/9/ALSA-2023-2487.html","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#moderate","tags":["article"]},{"url":"https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/9/html/9.2_release_notes/index","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2119436","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2120687","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2120699","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2120701","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2128384","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2129280","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2129904","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2165096","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_2487.json","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-3287","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-3287","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-34301","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-34301","tags":["advisory"]},{"url":"https://eclypsium.com/2022/08/11/vulnerable-bootloaders-2022/","tags":["article"]},{"url":"https://kb.cert.org/vuls/id/309662","tags":["article"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-34302","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-34303","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-34303","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2022-34302","description":"A flaw was found in New Horizon Datasys bootloaders before 2022-06-01. An attacker may use this bootloader to bypass or tamper with Secure Boot protections. In order to load and execute arbitrary code in the pre-boot stage, an attacker simply needs to replace the existing signed bootloader currently in use with this bootloader. Access to the EFI System Partition is required for booting using external media.","status":"published","published":"2022-08-26T00:00:00Z","modified":"2024-08-03T09:07:16.375Z","updated_at":"2026-11-02T14:34:42.354707Z"}],"euvd":[{"id":"EUVD-2022-37259","description":"A flaw was found in New Horizon Datasys bootloaders before 2022-06-01. An attacker may use this bootloader to bypass or tamper with Secure Boot protections. In order to load and execute arbitrary code in the pre-boot stage, an attacker simply needs to replace the existing signed bootloader currently in use with this bootloader. Access to the EFI System Partition is required for booting using external media.","status":"published","published":"2022-08-26T00:00:00Z","modified":"2024-08-03T09:07:16Z","updated_at":"2026-11-03T03:25:29.025225Z"}],"ghsa":[{"id":"GHSA-77q2-m9gq-g982","title":"A flaw was found in New Horizon Datasys bootloaders before 2022-06-01. An attacker may use this...","description":"A flaw was found in New Horizon Datasys bootloaders before 2022-06-01. An attacker may use this bootloader to bypass or tamper with Secure Boot protections. In order to load and execute arbitrary code in the pre-boot stage, an attacker simply needs to replace the existing signed bootloader currently in use with this bootloader. Access to the EFI System Partition is required for booting using external media.","status":"published","published":"2022-08-27T00:00:44Z","modified":"2023-11-23T05:05:01Z","cvss":[{"version":"3.1","score":6.7,"vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","level":"medium"}],"updated_at":"2026-11-02T14:55:05.15943Z"}],"nvd":[{"id":"CVE-2022-34302","description":"A flaw was found in New Horizon Datasys bootloaders before 2022-06-01. An attacker may use this bootloader to bypass or tamper with Secure Boot protections. In order to load and execute arbitrary code in the pre-boot stage, an attacker simply needs to replace the existing signed bootloader currently in use with this bootloader. Access to the EFI System Partition is required for booting using external media.","status":"published","published":"2022-08-26T18:15:09.047Z","modified":"2026-06-17T04:50:04.657Z","cvss":[{"version":"3.1","score":6.7,"vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","level":"medium","assessor":"primary"}],"updated_at":"2026-11-02T14:07:25.883929Z"}],"osv":[{"id":"RHSA-2023:2487","title":"Red Hat Security Advisory: fwupd security and bug fix update","status":"published","published":"2024-09-16T09:23:05Z","modified":"2026-06-27T10:16:59Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:10.611604Z"},{"id":"ALSA-2023:2487","title":"Moderate: fwupd security and bug fix update","description":"The fwupd packages provide a service that allows session software to update device firmware.\n\nSecurity Fix(es):\n\n* fwupd: world readable password in /etc/fwupd/redfish.conf (CVE-2022-3287)\n* shim: 3rd party shim allow secure boot bypass (CVE-2022-34301)\n* shim: 3rd party shim allow secure boot bypass (CVE-2022-34302)\n* shim: 3rd party shim allow secure boot bypass (CVE-2022-34303)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n\nAdditional Changes:\n\nFor detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.","status":"published","published":"2023-05-09T00:00:00Z","modified":"2026-10-29T11:30:56.414740871Z","updated_at":"2026-11-02T15:27:51.655726Z"}]}}