CVE-2024-7344

HIGH EXPLOITED RANSOMWARE

Cs-grp Neo Impact < 10.1.024-20241127 - Signature Verification Bypass

Title source: rule

CVE-2024-7344 has been observed exploited in the wild (reported by VulnCheck KEV), including in ransomware campaigns.

Howyar UEFI Application "Reloader" (32-bit and 64-bit) is vulnerable to execution of unsigned software in a hardcoded path.

Core 6

Core References

Patch

Third Party Advisory, US Government Resource

Exploit, Mitigation, Third Party Advisory

CVSS v3 8.2

EPSS 0.0104

EPSS Percentile 59.3%

Attack Vector LOCAL

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H

Vulnrichment

Exploitation none

Automatable no

Technical Impact total

VulnCheck KEV 2025-09-26

Ransomware Use Confirmed

CWE

CWE-347

Status published

Products (7)

cs-grp/neo_impact < 10.1.024-20241127

greenware/greenguard < 10.2.023-20240927

howyar/sysreturn < 10.2.023_20240919

radix/smart_recovery < 11.2.023-20240927

sanfong/ez-back_system < 10.3.024-20241127

signalcomputer/hdd_king < 10.3.021-20241127

wasay/erecoveryrx < 8.4.022-20241127

Published Jan 14, 2025

Tracked Since Feb 18, 2026