Description (CNA)
A vulnerability exists in UEFI implementations that use a hard-coded software-based Platform Key (PK). An attacker in possession of the corresponding PK private key can sign arbitrary UEFI executables or firmware components, causing them to be trusted by affected systems and potentially bypassing UEFI Secure Boot trust validation.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Acer / vz2694g | affected d61d0e09d008bfb29bc32532b1b94fcc4ee2af5e8372c6d38722a4e73ecc71d6 before 0 |
| Acer / aspire s 27 | affected 2bd2bfaf79a72eaca45e544e5c6a5bb842b292bdc229b8975b3101a4013e0d5f |
| Acer / aspire s32-1856 | affected 29837e239487cc83818a7f40f9280d9692a50376487899edd603494b0f30e4c5 |
| Acer / aspire xc-1710 | affected cdaa406bda1a58fbe9933622dec218a26f79871d42f0d3576fbf878e51a16201 |
| Acer / c24-1655 | affected 399f68dc94a6c42030efcd57fd034ff721f860b7b5d447779e7a6a6c99aba34f |
| Acer / aspire c22-1600 | affected d938d08543d35d4249a51057c1d9c62bb1f6440af19913c5feffcea47dd3de95 |
| Acer / c24-962 | affected 3d525f96f63995c51ab1bcd2c50ebb71661ffeca9f78f97cc97e851d0e2bbbdd |
| Acer / altos r680 f4 | affected a2679a9595a104d70bddc024dbc4f65f0dc9d906f30a0d1ae6b996b14246a6c2 |
| Acer / altos r680s f4 | affected e5fdaabf11b236c5c7b040d674936e84db746a180ab9999317e16dcb77aeeba4 |
| Aopen / iAPLx-DE(TAA30 TEST) | affected 94c6f84946db100b505af8a308f69ef6cddc2e310b50641a6e2e63bc9aed54e0 |
| Aopen / iKBLMUx-DER(Volta Charging) | affected fcd339e12730f057e41ad41228f9612d4954f2d0dbcfeef37e14dcdaf2866e05 |
| Dell / inspiron-15-3510-laptop | affected 7fbfd8b03d178e074572dff764f28af98c87c7556ce3837ccb8dfe993efa1940 |
| Dell / alienware-x17-r2-laptop | affected 65f5939878deede2e1b24a6412ba025b78f45b1562e9d365d97e1c76a32a1832 |
| Dell / alienware-m17-r4-laptop | affected f75b595b9ce5e1e25a5d64e54edffdf696251b4f4e860c0d3a03a183631f090e |
| Dell / alienware-x14-r1-laptop | affected 620848eeadb74a572d6400672aecca35f46dfdc7b5152bb028fbcbf74ea7bccd |
| Dell / alienware-aurora-r15-amd-desktop | affected 6348442334e85e8374884ea848685771053a7cf274ccb77559c710b5a00f61e9 |
| Dell / alienware-m17-r3-laptop | affected 413a04c12bde19f1f97d9d334ed57197f0405f9f10ab7154d2b71e5471577c97 |
| Dell / alienware-area51m-r2-laptop | affected 253743e7a39d0b709122c5329799f4c4608536eeb632218e7f0cbe1f6e8b5db8 |
| Dell / alienware-x15-r1-laptop | affected 4fc54067f263791aed2fa4b57b226ea15c4eb0f55b3797e002bb62aa936bdd8c |
| Dell / inspiron-15-3521-laptop | affected e2242e4aa3a284fcbbcf2f38a10bec24408f1eff74bb307e699ea46f483359f2 |
| Dell / alienware-aurora-r11-desktop | affected 8f79d9de33f5f131226a78ccb10bb16218a5be51b2105cc32e38ceb0c8c30e9a |
| Dell / inspiron-15-3502-laptop | affected 62c02a9b5a4d4328ac41c3e3aa7757e64e6c5cd52b9e047333ad18e60d17fcb6 |
| Dell / alienware-aurora-r13-desktop | affected dc5912033c5ca14475f2d59ca47f25c8840f362f0c8553d13bb06a8e47c42abf |
| Dell / xps-8950-desktop | affected 6982be0bd8e1aed1251fe5300eec2b515b7cab70e761cfb72074f5d658d092d9 |
| Dell / alienware-aurora-r15-desktop | affected 7e310dca802db0f7a22d39bb2d7d5b79c7e9df8e5698f0e691942ec334ce5794 |
| Dell / alienware-aurora-r14-desktop | affected 26a447a94e96fa8d9c590888cae490750c32d5af95faece3595f21efc41c1f2c |
| Dell / alienware-aurora-r16-desktop | affected 06a9dffc8fb3edafd1b6377cf38879860a0ae3c87f97258e09d189d291f64ead |
| Dell / xps-8960-desktop | affected 0dcd7494f4926fb04b56e9713f0b62eff3a345b626fa2adaf47636bf0bb4c3eb |
| Dell / alienware-m15-r2-laptop | affected 69da86e9cf24c49496529f3041604a6bb1c0c0ab86c192239d31d3a9b92467cd |
| Dell / inspiron-17-3782-laptop | affected 602a23f43b11817ad5439579969753866a54b836f34dfe19342e5188cf088d85 |
| Dell / alienware-15-r4 | affected 608e410d1c0475dac58b1e8f36b477aa8d9e9f28d30ec89d44b550e36bbbaf47 |
| Dell / inspiron-5680-gaming-desktop | affected f1075841f54237735c1135ebf92baeab9c0c3f8b051229f898520f5b0f265353 |
| Dell / alienware-17-laptop | affected d4ed519bd5e5ba2f027d00635494d485f19f3080d8baf6d711b190323294e216 |
| Dell / alienware-13-laptop | affected cb25317443d65ba126174c8b7547c7d2f6c0288f859e2063436eb7b350d9bf62 |
| Dell / inspiron-3472-desktop | affected 02877ae1ee43c787fa980d6e897e14546ac193100395bbcc6bc26fdf3077e860 |
| Dell / alienware-17-r3 | affected 003130dabf11c8b5df286d9584b3174faa9529cd6149513d13c7ce85d63d97b0 |
| Dell / alienware-13-r2 | affected e6819bd24e063807336994f36e1b7cafbbec46c2679a365dde1b54b720a049e4 |
| Dell / vostro-24-5460-aio | affected d54e560849c716d0ded4b25d9aacc746f77174cc6d3eeb3a50424eaf337c92aa |
| Dell / inspiron-20-3059-aio | affected 4b4fd4cc68e48cfbacaf1279ff42ce6e9d37aa7706efffb2a0bb84fbda2aabd2 |
| Dell / inspiron-24-5459-aio | affected 2c6a0bd7b3a91b9e1b309bde7d405812a42abe40001ce661252d81e7cd009650 |
| Dell / inspiron-22-3263-desktop-aio | affected 13deddbbdccb6e5411317e96bdb045e28c0dcbb7e86ed5f32e5d24b4b54a5657 |
| Dell / inspiron-3250-small-desktop | affected 95446bcddec63d36a9f5554815892c104febb73c676a075d789e4b7c69979fa6 |
| Dell / inspiron-24-3464-aio | affected 3ffd081959db4684563f0044cca9ac16d5467a42d40913f503bad8d171bf1c99 |
| Dell / inspiron-3662-desktop | affected 5a02b9214bb7ca03030323835a85efd84d369ff02a6baf9193083e2b22e8d0c3 |
| Dell / alienware-13 | affected fe9e2b75babda09ba22a3e99494198e125188d9345bda2b961f10e98e6c2b784 |
| Dell / inspiron-one-23-2330-aio | affected 374f19a62abe5b7c195038ebc945528046478ba7fac2b7b429edfaa47122e6e6 |
| Dell / alienware-17-r2 | affected e94ccb36573d53127cfdf1f6d617c31ba8562fbdd4b43e48fe1fd52325315756 |
| Dell / poweredge-c5230 | affected 52dbddaf0c9803e7f9dd389519b829515abe97dc0fbd9b979230de28880f595d |
| Dell / alienware-alpha | affected f1d2c02737ba96e93892f38c161b3f35fbca79a4302e439e8405d3434ed88fdb |
| Dell / inspiron-15-5552-laptop | affected 73e72a45f92daa7ef76dcf82e6d13113cd9acbd2250d78d2e02232535f83fbc5 |
| Dell / inspiron-3646-small-desktop | affected 081c82a0748297ca5841b1772330fb6e776c678d425789a66e3072fb73d072d7 |
| Dell / inspiron-24-3455-aio | affected 2fd0f72190810fa5c4a2a3f57a7bce51dd0baa47584b59b7cba4752a92c66ee5 |
| Dell / vostro-20-3052-aio | affected c4574a6a5e1e6b4f3b4a3317b51d75c3764395775f900b9ede99dca5e76849f2 |
| Dell / vostro-3252-small-desktop | affected 9cc04e65928cf4852d0ae16d55808b42542387ae389ebbd3e42f888638909932 |
| Dell / inspiron-3655-desktop | affected 31a7af2885146a94a82ce214a26e4dcdcfa36969aa47a7a1eaf3725fa6a2198d |
| Dell / inspiron-22-3265-desktop-aio | affected 7c0c8fab8b15d6de59936a3921f85d9e79f710c6c6db6459804b679d82760e26 |
| Dell / inspiron-17-5755-laptop | affected 19967c4eebd851b31936c8cab20f86008c7f065cf93217f6cc82350521cc640f |
| Dell / inspiron-3656-desktop | affected a0e12007dd08b6d9a22fcc6548d0562ea3a966b2030ea9d00c739971e02b6c9a |
| Dell / vostro-20-3015-aio | affected 05b03dab647098c957cadd2a66ebb1401dc5dae51f267351c0d076c239d5856b |
| Formelife / Studio Sys UPD | affected a451ed9d6359fd109f495c75bab2678285265a72be64b3e5d0d5447a0e167cd5 |
| Gigabyte / E152-ZE1 (rev. A00) | affected a9638651a2475403924f124552dc199689a45d2e2e59e3dea2b223667dfb63de |
| Fujitsu / AU47 M1 | affected d3715136d50fc486ef59fb4aee1d7f06552fdf98423809939538fe905a1aa0b3 |
| Fujitsu / PRIMERGY TX100 S3p | affected bfadb1d20541d4c39857e7b295b7ad20ce81d393f014eae27565bc173c1880c0 |
| Fujitsu / PRIMERGY CX270 S2 | affected e44c2088ee54191192cc690787d74d8ddbfe3fc97c58fb2c42cf8a952784c94f |
| Fujitsu / PRIMERGY CX420 S1 Chassis | affected c27a0e267f18a89c8ba8aadd37786ef8fe18162b60b45fc209bf992b570837af |
| Fujitsu / PRIMERGY RX100 S7p | affected e71744d4e18cbee18a1fe381a8a83350487baa6cfbf3729d999f85d7b650610a |
| Fujitsu / PRIMERGY TX120 S3p | affected 51a9197d05b1aad84546d9469b2c400bd7536eea62b2760a308e5bf84e71d74b |
| Gigabyte / G152-Z12 | affected ad457250d51a0638880d9cf1df9dd029ab34b36265eda73c5459d8d0460ba3de |
| Gigabyte / G242-Z11 | affected 2ab6af312a78886a13144814ce766a771604755f8dd303381658026304415280 |
| Gigabyte / G242-Z12 | affected eef3fd99672410b85e6342c5757723d0d3ccecef9805237955baa20780de8b4f |
| Gigabyte / G262-ZR0 | affected f21b8f836105cdb4051d8bb29302dcf86836b640bf048b24f3c76e930b513b32 |
| Gigabyte / G292-Z20 (rev. A00) | affected 62bb737d55f4caa082b7ea2aa6f8a59c8efdaf9d5ac5b158cbfb32a6cead8164 |
| Gigabyte / G292-Z43 | affected 1b6ff7d60400c7c21a5b28f947475e61abee187627c1ff12cddb25b1ce59ecb3 |
| Gigabyte / G292-Z45 | affected 18def9ce5aa6551c1d7e77e9f53e34701f77b89d6b32d41ea050cc94d52941e1 |
| Gigabyte / G482-Z50 | affected b14d2e3fadc16c97684a4ae947798bb3a67372441dd7252568f71fc86e98ae9f |
| Gigabyte / G492-Z52 | affected 062e3100bfbe635c66feed863141f7a6f2bfcf0b887a5b3d7ae31fb610d17cac |
| Gigabyte / H252-Z12 (rev. A02) | affected ac416150a9752dc20107bef240e73c6054af4992348003429bfd97a7373f4f27 |
| Gigabyte / H262-Z61 | affected 340cc5c8f4468eb2d36b684dffbf139b4ac4504b5db3993c3c1b5145858c5131 |
| Gigabyte / H262-Z6B | affected 0e761b6f3c7d3a1407addf499ff848c493a9d0b0197368cbe858bbc4fa5a4702 |
| Gigabyte / H282-ZC0 (rev. A00) | affected 0b739af751913ea6ff42999069963dcf6a1bdd58a3de800ab721d9bdbd59bf0d |
| Gigabyte / MZ32-AR0 (rev. 3.x) | affected a4102b19258804214beb838f61699a7623cc654341e6f60ad986dae805935c14 |
| Gigabyte / MZ72-HB0 (rev. 3.x/4.x) | affected e0a3837abd91821c4ad98687d2dc6456b7fcb05c8b672c48f242ffeabfa3e9b4 |
| Gigabyte / MZ72-HB2 (rev. 3.x) | affected 7678e64f7728c059b228ddec74f0918f0544d5193f7b8efe0bf03e8f36c2f5c5 |
| Gigabyte / R162-Z10 | affected 122baff0bf1243b945a7eaa9ca55303469d624d6150d4da136d697878177f1a8 |
| Gigabyte / R162-ZA2 | affected 9d318d27111a3c5a2e3a6451103750d70dec9d6e9d048f7e98fcd60066b98aee |
| Gigabyte / R182-Z90 (rev. A00/B00/AT0) | affected dbd77ee47e4bccbb2b8af2883765641e9d7c404937da2942637fa1b4b6d4d635 |
| Gigabyte / R262-ZA2 | affected c7f73261e85bdc43932e49254cb8654ed2ce0945379592cecb081d51e5834289 |
| Gigabyte / R282-Z97 (rev. A00) | affected 076310804e591d1c2d4ab1d53cff0866c04a4189e03e6964b528b8a94faa7991 |
| Gigabyte / S252-ZC0 | affected 8927ee41096d71b75bbef2672e22f640a22ae3588f4f44786fff92c70b861885 |
| Gigabyte / ME03-CE0 (rev. 1.0) | affected 79700c28616b906f5534cf45d4582878a73f96eff24f1f894bd04b24c00eade8 |
| Gigabyte / ME03-PE0 (rev. 1.x) | affected ac5ec67cafd72fd7f497c3759b0dcf359de8b7db6941120c0c69d5f3eea4bcbc |
| Gigabyte / ME33-AR0 (rev. 1.0) | affected 8bdf9b526d2e9e65f23ded60745006c65678d184a258761666d3864432cc0cac |
| Gigabyte / R143-EG0-AAC1 | affected 630321979d80b22e20ca5fc713b2e3e1a8d9ec9ecaa6e2f814193ab8471636aa |
| Gigabyte / R243-E30-AAC1 | affected ae9c0a6e84b0c2912eda99c2de4e95d45c0c8feb2a097e02832ae03c74796f50 |
| Gigabyte / G191-H44 | affected 28068e88e5041161f4485f958f49060d6a865e4beb0b53bafc8f3c5e5e3923b9 |
| Gigabyte / G241-G40 (rev. 100) | affected 912834981a1de06dcdd4f8cfd11e7db46ac691e5ef20616d76d859e889c303be |
| Gigabyte / G291-2G0 (rev. 100) | affected 0dbbb711ff0879479dc30b9a7116fb94f093e0225b74916f6b79edae90d8fb2a |
| Gigabyte / G591-HS0 | affected bce2bb4589e9ba8bc8029514a887f3f3bb4ded3556bb5d77dc1a38bad564b435 |
| Gigabyte / H231-G20 (rev. 100/A00) | affected 819cf98fc21e036b3ae7e6390ae09edcf6fc6c260b22bf6ede0852029ef2495b |
| Gigabyte / H261-H61 (rev. 100) | affected 190d03dff0cfed20b38ae3270c8bb197b024765963dff6b7730d96bfebcbb24c |
CWE
No CWE identifiers supplied.
References
- https://uefi.org/specs/UEFI/2.9_A/32_Secure_Boot_and_Driver_Signing.html
- https://www.binarly.io/advisories/brly-2024-005
- https://kb.cert.org/vuls/id/455367
- https://github.com/binarly-io/Vulnerability-REsearch/blob/main/PKfail/BRLY-2024-005.md
- https://www.supermicro.com/en/support/security_PKFAIL_Jul_2024
- https://www.intel.com/content/www/us/en/security-center/announcement/intel-security-announcement-2024-07-25-001.html
- https://security.ts.fujitsu.com/ProductSecurity/content/Fujitsu-PSIRT-FJ-ISS-2024-072412-Security-Notice.pdf
- https://www.gigabyte.com/us/Support/Security/2205
ADP enrichment
No English description supplied.
No English description supplied.
No references supplied.