CVE-2023-24932
MEDIUM EXPLOITED IN THE WILDWindows 10 1507-22H2 and Windows 11 21H2-22H2 - Secure Boot Security Feature Bypass
Title source: llmExploitation Summary
CVE-2023-24932 has been observed exploited in the wild (reported by VulnCheck KEV, InTheWild.io). EIP tracks 3 public exploits from researchers including ajf8729, helleflo1312, v1ckxy.
AI-analyzed exploit summary This repository contains PowerShell scripts for remediating CVE-2023-24932 (BlackLotus UEFI bootkit vulnerability) by updating Secure Boot certificates and the Boot Manager. It includes detailed logging and verification steps but does not exploit the vulnerability.
Description
Secure Boot Security Feature Bypass Vulnerability
Exploits (3)
This repository contains PowerShell scripts for remediating CVE-2023-24932 (BlackLotus UEFI bootkit vulnerability) by updating Secure Boot certificates and the Boot Manager. It includes detailed logging and verification steps but does not exploit the vulnerability.
This PowerShell script automates the mitigation process for CVE-2023-24932, a Secure Boot vulnerability, by orchestrating multiple steps including registry updates, reboots, and checks for BitLocker and Windows updates. It ensures persistence across reboots using RunOnce registry entries and logs progress to a file.
This PowerShell script automates the exploitation of CVE-2023-24932, a Secure Boot bypass vulnerability, by orchestrating multiple steps involving registry modifications, system reboots, and Secure Boot updates. It includes checks for BitLocker, TPM version, and Windows updates, ensuring the system is in a vulnerable state before proceeding with the exploit.
References (1)
Scores
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H