3 mysterious vulnerabilities (CryptoPro, Eurosoft, New Horizon Data Systems)
3 mysterious vulnerabilities
CERT/CC: CVE-2022-34303 Crypto Pro Boot Loader Bypass
CERT/CC: CVE-2022-34301 Eurosoft Boot Loader Bypass
CERT/CC: CVE-2022-34302 New Horizon Data Systems Inc Boot Loader Bypass
They came from the US CERT Coordination Center.
No one writes anything about them, only Tenable. “security bypass vulnerabilities in a third-party driver affecting Windows Secure Boot”.
Maybe this is of course a coincidence and we are talking about other software, but isn’t Crypto Pro a Russian #CryptoPro, “the company’s main activity is cryptographic software development and public key infrastructure solutions based on national and international standards.”?
Isn’t Eurosoft a Russian #Eurosoft, “software for architectural design”?
It’s all very curious.
Telegram: https://t.me/avleonovcom/1031
Blogpost: https://avleonov.com/2022/08/23/micro...