CVE-2024-7344

Name: CVE-2024-7344
Creator: NVD / NIST
Published: 2025-01-14T14:15:34.93+00:00
License: https://creativecommons.org/publicdomain/zero/1.0/

HIGHCVSS 8.2/10EPSS 1.04%

Last modified Jun 17, 2026

CVE-2024-7344 is a high-severity vulnerability rated 8.2/10 on the CVSS scale. Howyar UEFI Application "Reloader" (32-bit and 64-bit) is vulnerable to execution of unsigned software in a hardcoded path.. EPSS estimates a 1.04% chance of exploitation in the next 30 days.

Description

Howyar UEFI Application "Reloader" (32-bit and 64-bit) is vulnerable to execution of unsigned software in a hardcoded path.

Metrics

CVSS 3.1

8.2/10

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H

EPSS Probability

1.04%

59.6th percentile

Probability of exploitation in the next 30 days. Learn more

Weakness Enumeration

CWE-347

Affected Software

Vendor	Product	Versions
Cs-Grp	Neo Impact	< 10.1.024-20241127
Greenware	Greenguard	< 10.2.023-20240927
Howyar	Sysreturn	< 10.2.023_20240919
Radix	Smart Recovery	< 11.2.023-20240927
Sanfong	Ez-Back System	< 10.3.024-20241127
Signalcomputer	Hdd King	< 10.3.021-20241127
Wasay	Erecoveryrx	< 8.4.022-20241127

References

https://uefi.org/revocationlistfilePatch
https://uefi.org/specs/UEFI/2.10/03_Boot_Manager.htmlRelated
https://uefi.org/specs/UEFI/2.10/32_Secure_Boot_and_Driver_Signing.htmlRelated
https://www.eset.com/blog/enterprise/preparing-for-uefi-bootkits-eset-discovery-shows-the-importance-of-cyber-intelligence/Related
https://www.kb.cert.org/vuls/id/529659Third Party Advisory, US Government Resource
https://www.kb.cert.org/vuls/id/529659Third Party Advisory, US Government Resource
https://www.welivesecurity.com/en/eset-research/under-cloak-uefi-secure-boot-introducing-cve-2024-7344/Exploit, Mitigation, Third Party Advisory

Timeline

Published: Jan 14, 2025
Last Modified: Jun 17, 2026
Status: Analyzed

Frequently Asked Questions

What is CVE-2024-7344?

Howyar UEFI Application "Reloader" (32-bit and 64-bit) is vulnerable to execution of unsigned software in a hardcoded path.

How severe is CVE-2024-7344?

CVE-2024-7344 has a CVSS score of 8.2/10 (HIGH severity). The EPSS model estimates a 1.04% probability of exploitation in the next 30 days.

How do I fix CVE-2024-7344?

Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.

Are you affected by CVE-2024-7344?

Run a free Strix scan to check your systems for this vulnerability.

Scan your code now

Source: NVD / NIST