{"id":"CVE-2024-7344","aliases":["EUVD-2024-48259","GHSA-7xfj-4r7x-3733"],"status":"published","title":"Howyar UEFI Application \"Reloader\"  (32-bit and 64-bit)  is vulnerable to execution of unsigned software in a hardcoded path.","description":"Howyar UEFI Application \"Reloader\"  (32-bit and 64-bit)  is vulnerable to execution of unsigned software in a hardcoded path.","severity":{"version":"3.1","score":8.2,"vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-09","score":0.01077,"percentile":0.65253,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":true,"fix_available":false},"cwes":["CWE-347"],"published":"2025-01-14T13:29:56Z","modified":"2026-06-17T08:19:54Z","exploits":[{"source":"pocgithub","id":"TheMalwareGuardian/CVE-2024-7344","title":"TheMalwareGuardian/CVE-2024-7344","date":"2026-02-08","url":"https://github.com/TheMalwareGuardian/CVE-2024-7344"},{"source":"pocgithub","id":"TheMalwareGuardian/CVE-2026-79298","title":"TheMalwareGuardian/CVE-2026-79298","date":"2026-09-11","url":"https://github.com/TheMalwareGuardian/CVE-2026-79298"},{"source":"pocgithub","id":"TheMalwareGuardian/UEFI-Security-Research-Howyar-SysReturn-NetCopy","title":"TheMalwareGuardian/UEFI-Security-Research-Howyar-SysReturn-NetCopy","date":"2026-06-15","url":"https://github.com/TheMalwareGuardian/UEFI-Security-Research-Howyar-SysReturn-NetCopy"}],"products":[{"vendor":"ces taiwan","product":"ces neoimpact"},{"vendor":"cs-grp","product":"neo_impact"},{"vendor":"greenware","product":"greenguard"},{"vendor":"greenware technologies","product":"greenguard"},{"vendor":"howyar","product":"sysreturn"},{"vendor":"howyar technologies","product":"sysreturn (32-bit and 64-bit)"},{"vendor":"radix","product":"smart_recovery"},{"vendor":"radix","product":"smartrecovery"},{"vendor":"sanfong","product":"ez-back_system"},{"vendor":"sanfong","product":"sanfong ez-back system"},{"vendor":"signalcomputer","product":"hdd king"},{"vendor":"signalcomputer","product":"hdd_king"},{"vendor":"wasay","product":"erecoveryrx"}],"references":[{"url":"https://uefi.org/revocationlistfile","tags":["Patch"]},{"url":"https://uefi.org/specs/UEFI/2.10/32_Secure_Boot_and_Driver_Signing.html","tags":["Related"]},{"url":"https://uefi.org/specs/UEFI/2.10/03_Boot_Manager.html","tags":["Related"]},{"url":"https://www.eset.com/blog/enterprise/preparing-for-uefi-bootkits-eset-discovery-shows-the-importance-of-cyber-intelligence/","tags":["Related"]},{"url":"https://www.kb.cert.org/vuls/id/529659","tags":["Third Party Advisory","US Government Resource"]},{"url":"https://www.welivesecurity.com/en/eset-research/under-cloak-uefi-secure-boot-introducing-cve-2024-7344/","tags":["Exploit","Mitigation","Third Party Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-7344"},{"url":"https://www.eset.com/blog/enterprise/preparing-for-uefi-bootkits-eset-discovery-shows-the-importance-of-cyber-intelligence"},{"url":"https://www.welivesecurity.com/en/eset-research/under-cloak-uefi-secure-boot-introducing-cve-2024-7344"},{"url":"https://github.com/advisories/GHSA-7xfj-4r7x-3733"}],"sources":{"cve":[{"id":"CVE-2024-7344","title":"Howyar UEFI Application \"Reloader\"  (32-bit and 64-bit)  is vulnerable to execution of unsigned software in a hardcoded path.","description":"Howyar UEFI Application \"Reloader\"  (32-bit and 64-bit)  is vulnerable to execution of unsigned software in a hardcoded path.","status":"published","published":"2025-01-14T13:29:56.915Z","modified":"2025-09-15T15:36:17.748Z","cvss":[{"version":"3.1","score":8.2,"vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H","level":"high","assessor":"adp"}],"updated_at":"2026-11-02T14:34:21.025267Z"}],"euvd":[{"id":"EUVD-2024-48259","description":"Howyar UEFI Application \"Reloader\"  (32-bit and 64-bit)  is vulnerable to execution of unsigned software in a hardcoded path.","status":"published","published":"2025-01-14T13:29:56Z","modified":"2025-09-15T15:36:17Z","cvss":[{"version":"3.1","score":8.2,"vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T20:31:44.034664Z"}],"ghsa":[{"id":"GHSA-7xfj-4r7x-3733","title":"Howyar UEFI Application \"Reloader\"  (32-bit and 64-bit)  is vulnerable to execution of unsigned...","description":"Howyar UEFI Application \"Reloader\"  (32-bit and 64-bit)  is vulnerable to execution of unsigned software in a hardcoded path.","status":"published","published":"2025-01-14T15:30:54Z","modified":"2025-01-21T21:30:50Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N","level":"medium"}],"cwes":["CWE-347"],"updated_at":"2026-11-02T14:59:37.435968Z"}],"nvd":[{"id":"CVE-2024-7344","description":"Howyar UEFI Application \"Reloader\"  (32-bit and 64-bit)  is vulnerable to execution of unsigned software in a hardcoded path.","status":"published","published":"2025-01-14T14:15:34.93Z","modified":"2026-06-17T08:19:54.407Z","cvss":[{"version":"3.1","score":8.2,"vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H","level":"high","assessor":"primary"},{"version":"3.1","score":8.2,"vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H","level":"high","assessor":"secondary"}],"cwes":["CWE-347"],"updated_at":"2026-11-02T14:10:42.329342Z"}]}}