Eurosoft (UK) Ltd (signed UEFI bootloader): Signed UEFI bootloader containing a shell that executes arbitrary code

Impact

Signed UEFI bootloader containing a shell that executes arbitrary code, bypassing Secure Boot on any machine trusting the Microsoft third-party CA.

Who can reach it

EFI System Partition write access.

What to do

dbx revocation update. Track revocation-list version per node as a fleet health metric - this class recurs roughly annually and package inventories will never show it.

References