Description
Multiple Microsoft-sigend UEFI SHIM bootloaders are vulnerable to SecureBoot bypass. An attacker with administrative privileges or the ability to modify the boot process could use one of the vulnerable shim bootloaders to bypass Secure Boot protections and execute arbitrary code before the operating system loads. Specific UEFI DBX update is required to block these vulnerable boot loaders.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Oracle Corporation OracleLinux(7.2) shim
0.9affected
PC-Doctor Service Center Enterprise
14 to ≤ 17.0.7536.900affected
PC-Doctor Service Center Drive Erase
15 to ≤ 17.0.7538.592affected
PC-Doctor Service Center Japan
15 to ≤ 17.0.7539.904affected
PC-Doctor Service Center
14 to ≤ 17.0.7535.900affected
PC-Doctor Network Factory for Linux (Bootable Diagnostics)
6.9 to ≤ 6.20.7711.267affected
PC-Doctor Factory for Linux (Bootable Diagnostics)
6.9 to ≤ 6.20.7710.267affected
Spyrus WTGCreator
4.2affected
Blancco UK WhiteCanyon WipeDrive
8.0.0 to ≤ 8.1.3affected
baramundi software baramundi Management Suite
* to ≤ 2024R1affected
SUSE Linux OpenSUSE shim
0.9affected
Finland Matriculation Board Abitti 1
1.0.0affected
NTC IT ROSA LLC RosaLinux
R9affected
NTC IT ROSA LLC RosaLinux
R10affected