Medium severity · published Aug 26, 2024
CVE-2024-8105
Insecure Platform Key (PK) used in UEFI system firmware signature
6.4
CVSS
0.3%
EPSS
No
On KEV
Description
A vulnerability exists in UEFI implementations that use a hard-coded software-based Platform Key (PK). An attacker in possession of the corresponding PK private key can sign arbitrary UEFI executables or firmware components, causing them to be trusted by affected systems and potentially bypassing UEFI Secure Boot trust validation.
CVSS vector
CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H
Attack vector
Local
Complexity
High
Privileges
High
User interaction
None
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.3% · higher than 20% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
SS
Studio Sys UPD · Formelife
a451ed9d6359fd109f495c75bab2678285265a72be64b3e5d0d5447a0e167cd5 · source: vendor
AL
alienware-13 · Dell
fe9e2b75babda09ba22a3e99494198e125188d9345bda2b961f10e98e6c2b784 · source: vendor
AL
alienware-13-laptop · Dell
cb25317443d65ba126174c8b7547c7d2f6c0288f859e2063436eb7b350d9bf62 · source: vendor
AL
alienware-13-r2 · Dell
e6819bd24e063807336994f36e1b7cafbbec46c2679a365dde1b54b720a049e4 · source: vendor
AL
alienware-15-r4 · Dell
608e410d1c0475dac58b1e8f36b477aa8d9e9f28d30ec89d44b550e36bbbaf47 · source: vendor
AL
alienware-17-laptop · Dell
d4ed519bd5e5ba2f027d00635494d485f19f3080d8baf6d711b190323294e216 · source: vendor
AL
alienware-17-r2 · Dell
e94ccb36573d53127cfdf1f6d617c31ba8562fbdd4b43e48fe1fd52325315756 · source: vendor
AL
alienware-17-r3 · Dell
003130dabf11c8b5df286d9584b3174faa9529cd6149513d13c7ce85d63d97b0 · source: vendor
AL
alienware-alpha · Dell
f1d2c02737ba96e93892f38c161b3f35fbca79a4302e439e8405d3434ed88fdb · source: vendor
AL
alienware-area51m-r2-laptop · Dell
253743e7a39d0b709122c5329799f4c4608536eeb632218e7f0cbe1f6e8b5db8 · source: vendor
AL
alienware-aurora-r11-desktop · Dell
8f79d9de33f5f131226a78ccb10bb16218a5be51b2105cc32e38ceb0c8c30e9a · source: vendor
AL
alienware-aurora-r13-desktop · Dell
dc5912033c5ca14475f2d59ca47f25c8840f362f0c8553d13bb06a8e47c42abf · source: vendor
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2024-8105
CVE.org
https://www.cve.org/CVERecord?id=CVE-2024-8105
github.com
https://github.com/binarly-io/Vulnerability-REsearch/blob/main/PKfail/BRLY-2024-005.md
kb.cert.org
https://kb.cert.org/vuls/id/455367
security.ts.fujitsu.com
https://security.ts.fujitsu.com/ProductSecurity/content/Fujitsu-PSIRT-FJ-ISS-2024-072412-Security-Notice.pdf
uefi.org
https://uefi.org/specs/UEFI/2.9_A/32_Secure_Boot_and_Driver_Signing.html
www.binarly.io
https://www.binarly.io/advisories/brly-2024-005
www.gigabyte.com
https://www.gigabyte.com/us/Support/Security/2205