CVE-2023-24932HighCVSS 6.7

Secure Boot Security Feature Bypass Vulnerability

Published
May 9, 2023
Last Modified
—

🔗 CVE IDs covered (1)

CVE-2023-24932 →

📋 Description

According to the CVSS metric, privileges required is high (PR:H). What does that mean for this vulnerability? Successful exploitation of this vulnerability requires an attacker to compromise admin credentials on the device.

How can an attacker successfully exploit this vulnerability? To exploit the vulnerability, an attacker who has physical access or Administrative rights to a target device could install an affected boot policy.

What kind of security feature could be bypassed by successfully exploiting this vulnerability? An attacker who successfully exploited this vulnerability could bypass Secure Boot.

Are there additional steps I need to take to be protected from this vulnerability? The security update addresses the vulnerability by updating the Windows Boot Manager, but is not enabled by default. Additional steps are required at this time to mitigate the vulnerability. Please refer to the following for steps to determine impact on your environment: KB5025885: How to manage the Windows Boot Manager revocations for Secure Boot changes associated with CVE-2023-24932.

I am running Window 11 23H2 or Server 2022, 23H2 Edition, What do I need to do to be protected from this vulnerability? Protections for the Secure Boot bypass were included in Windows 11 Version 23H3 and Windows Server 2022, 23H2 Edition at the time of their release; however, these protections are not enabled by default. Customers running these versions of Windows must enable the protections as outlined in KB5025885: How to manage the Windows Boot Manager revocations for Secure Boot changes associated with CVE-2023-24932.

🎯 Affected products42

  • Windows 10 Version 1607 for 32-bit Systems
  • Windows 10 Version 1607 for x64-based Systems
  • Windows 10 Version 1809 for 32-bit Systems
  • Windows 10 Version 1809 for ARM64-based Systems
  • Windows 10 Version 1809 for x64-based Systems
  • Windows 10 Version 20H2 for 32-bit Systems
  • Windows 10 Version 20H2 for ARM64-based Systems
  • Windows 10 Version 21H2 for 32-bit Systems
  • Windows 10 Version 21H2 for ARM64-based Systems
  • Windows 10 Version 21H2 for x64-based Systems
  • Windows 10 Version 22H2 for 32-bit Systems
  • Windows 10 Version 22H2 for ARM64-based Systems
  • Windows 10 Version 22H2 for x64-based Systems
  • Windows 10 for 32-bit Systems
  • Windows 10 for x64-based Systems
  • Windows 11 Version 22H2 for ARM64-based Systems
  • Windows 11 Version 22H2 for x64-based Systems
  • Windows 11 Version 23H2 for ARM64-based Systems
  • Windows 11 Version 23H2 for x64-based Systems
  • Windows 11 Version 24H2 for ARM64-based Systems
  • Windows 11 Version 24H2 for x64-based Systems
  • Windows 11 version 21H2 for ARM64-based Systems
  • Windows 11 version 21H2 for x64-based Systems
  • Windows Server 2008 R2 for x64-based Systems Service Pack 1
  • Windows Server 2008 R2 for x64-based Systems Service Pack 1 (Server Core installation)
  • Windows Server 2008 for 32-bit Systems Service Pack 2
  • Windows Server 2008 for 32-bit Systems Service Pack 2 (Server Core installation)
  • Windows Server 2008 for x64-based Systems Service Pack 2
  • Windows Server 2008 for x64-based Systems Service Pack 2 (Server Core installation)
  • Windows Server 2012
  • +12 more not shown

✅ Remediation

KB5062553 (Security Update) — fixed build 10.0.26100.4652 KB5062553 (Security Update) — fixed build 0.0.26200.4652 KB5062557 (Security Update) — fixed build 10.0.17763.7558 KB5040430 (Security Update) — fixed build 10.0.17763.6054 KB5062572 (Security Update) — fixed build 10.0.20348.3932 KB5026361 (Security Update) — fixed build 10.0.19042.2965 KB5040431 (Security Update) — fixed build 10.0.22000.3079 KB5062554 (Security Update) — fixed build 10.0.19044.6093 KB5062552 (Security Update) — fixed build 10.0.22621.5624 KB5062554 (Security Update) — fixed build 10.0.19045.6093 KB5062552 (Security Update) — fixed build 10.0.22631.5624 KB5062570 (Security Update) — fixed build 10.0.25398.1732 KB5062561 (Security Update) — fixed build 10.0.10240.21073 KB5062560 (Security Update) — fixed build 10.0.14393.8246 KB5062624 (Monthly Rollup) — fixed build 6.0.6003.23418 KB5062618 (Security Only) — fixed build 6.0.6003.23418 KB5062632 (Monthly Rollup) — fixed build 6.1.7601.27820 KB5062619 (Security Only) — fixed build 6.1.7601.27820 KB5062592 (Monthly Rollup) — fixed build 6.2.9200.25573 KB5062597 (Monthly Rollup) — fixed build 6.3.9600.22676

🔗 References (35)