?? ?????????? ??? ??? ????? ?????? ?? ?? ??? ???? ??? ???? Unified Extensible Firmware Firmware ?? ???? UEFI ??????? ??? ???[?] ?? ????? ??? ??? ????? UEFI Secure Boot ?? ????? ??????.
???? ?????? ????????? Eclypsium ?? ?????? ?? ?? The Hacker News ?? ?????? ?????? ??? ???? ???????[?]: «??? ????????????? ?? ??????? ?? ??? ??????? ????? EFI ? ???????? ??? ???? ????? ?? ?? ?????????? ?? ????? ?? ????? UEFI ???? ???????? ???? ????????? ?? ??? ???? ????? ???? ??????????? ???? ???.»
??? ??????? ???[?] ??????????? ???? ?? ???? ?????????? ???? ? ????? ???????? ?? ????? ??? ??? ????????? ????? ? ???????? ???? ?? ??????????? ???????????[?] ??? ???? ??? ?????? ???? ???????:
- Eurosoft Boot Loader (CVE-2022-34301)
- New Horizon Data Systems Inc Boot Loader (CVE-2022-34302)
- Crypto Pro Boot Loader (CVE-20220-34303)
Secure Boot ?? ????????? ??????[?] ??? ?? ???? ??????? ?? ??????? ?????????? ???? ????? ?????????? ?????? (??? ???) ????? ??? ??? ? ??????? ???? ?????? ?? ??? ????????? ???? ?????? ?????? ??????? ???? (OEM) ?????????? ??????.
?????????? ?? ??????? ??? ???????? ??????[?]: « firmware??? ??? ?????? ???? UEFI ?? ?????????? ??????? ? ????? ?? ?? ?????????? UEFI ?? ???? ??????? SoC? ?????????? ? OEM ????? ??? ???? ?????? ???????». “???? UEFI? ?? ????? UEFI Windows Boot Manager ?? ?????????? ??????? ?? ????? ?????? ??? ?? ???? ???? ??? ????? ??????????? ???? ??? (FFU) ?? ???? ???????? ??????? ?? ?????????? ??????????? ??? ?? ?????????? ???? ??? ???.”
?????? ?????? ??????????? ???????????[?] ?? ??????? ??????????? ???? Eclypsium ???????? ?? ???? ????? ??? ?? ???????? ?????? ?? ?? ????? ?????????? ??? ???? ? ?? ?????? ???? ???? ?? ?? ??? ?????? ?????????? ???? ???.
??? ???????? ????? ?????? ????? ????? ?? ?? ?????? ?? ????? ?????? ?? ?? ???? ?? ??????? ?????????? ?? ?????? ?? ??? ???? ?????????? ? ???????? ???????? ???? ??????? ?????? ??????[?] ?? ??? ????? ? ?????? ???? ?? ????? ???? ???????????? ?????? ???? ???.
Eclypsium ?? CVE-2022-34302 ?? “???????? ???????” ???????? ???????? ??? ?? ?????????? New Horizon Datasys ??????? ???? ??????????? ?? ??? ??????? ??????? ???? ???? ???????? “??????? ?????????? ????? ??????? ???? ??????????????? ?????? ?? ??? ???? ???.”
Mickey Shkatov ? Jesse Michael ?? ?????? Eclypsium ?????????? ?????? ???? ????? ??????????????? ?????? ????????? ????[?] ??????????????? ????? ?????? ???? ?????? (TPM) ? ????? ???? ?????.
????????? ??? ?? ??????????? ?? ??? ????????????? ?????? ????????? ????? ?? ???????? ???? ???? ????? ?????? ?????? ???? ?? ???? ??? ?????? ?? ?????????? ??? ??? ????? ???? ?????? (UAC)[10] ?? ???????? ?? ??? ??????[??] ???? ???????? ?????????? ???? ???????.
?????? ????? ??????: ??? ????????????? ????? BootHole? ???????? ????? ???????? ??? ??????????? ?? ?? ?? ?????? ????? ????????? ?? ????????? ? ?????? ?? ?? ?? ??? ??????? ???? ?????? ?????? ???????[??] ? ???????: «??? ????? ???? ?????? ?? ????? ?????????????? ???? ?? ?? ??? ???? ???????? ?? ?????? ?? ????? ??????.”
?????
[?] https://en.wikipedia.org/wiki/UEFI
[?] https://eclypsium.com/2022/08/11/vulnerable-bootloaders-2022
[?] https://kb.cert.org/vuls/id/309662
[?] https://thehackernews.com/2022/08/microsoft-issues-patches-for-121-flaws.html
[?] https://docs.microsoft.com/en-us/windows-hardware/design/device-experiences/oem-secure-boot
[?] https://docs.microsoft.com/en-us/windows-hardware/drivers/bringup/boot-and-uefi
[?] https://support.microsoft.com/en-us/topic/kb5012170-security-update-for-secure-boot-dbx-august-9-2022-72ff5eed-25b4-47c7-be28-c42bd211bb15
[?] https://thehackernews.com/2022/07/experts-uncover-new-cosmicstrand-uefi.html
[?] https://docs.microsoft.com/en-us/azure/security/fundamentals/measured-boot-host-attestation
[??] https://en.wikipedia.org/wiki/User_Account_Control
[??] https://www.microsoft.com/en-us/msrc/windows-security-servicing-criteria
[??] https://thehackernews.com/2020/07/grub2-bootloader-vulnerability.html
[??] https://thehackernews.com/2022/08/researchers-uncover-uefi-secure-boot.html
