Read the docs
TI-2024-06805 Aliases CVE-2024-7344GHSA-7xfj-4r7x-3733

Improper signature verification in Radix SmartRecovery

Priority MEDIUM 40CWE-347Published · Updated

Key facts

Attack vector
Local
Privileges required
High
User interaction
None
Attack complexity
Low
Impact type
Security bypass
Confidentiality · integrity · availability
High · High · High
Fix status
Fixed

Attack profile from CVSS 3.1 · CISA ADP. Fix status from CNA. Impact type from CWE-347.

Summary

Howyar UEFI Application "Reloader" (32-bit and 64-bit) is vulnerable to execution of unsigned software in a hardcoded path.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.01077 65th percentileScored 2026-11-07
Public exploit Yes 1 exploit referenceTagged by NVD
Fix Fixed SmartRecovery (Radix): 11.2.023-20240927GreenGuard (Greenware Technologies): 10.2.023-20240927+4 more products

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
None
Automatable
No
Technical impact
Total

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
RadixSmartRecoverybefore 11.2.023-2024092711.2.023-20240927Patch availableCNA
Greenware TechnologiesGreenGuardbefore 10.2.023-2024092710.2.023-20240927Patch availableCNA
Howyar TechnologiesSysReturn (32-bit and 64-bit)before 10.2.0232024091910.2.02320240919Patch availableCNA
SANFONGSANFONG EZ-Back Systembefore 10.3.024-2024112710.3.024-20241127Patch availableCNA
CES TaiwanCES NeoImpactbefore 10.1.024-2024112710.1.024-20241127Patch availableCNA
SignalComputerHDD Kingbefore 10.3.021-2024112710.3.021-20241127Patch availableCNA
  • SmartRecovery VendorRadix Affected before 11.2.023-20240927 Fixed in 11.2.023-20240927 Patch available CNA
  • GreenGuard VendorGreenware Technologies Affected before 10.2.023-20240927 Fixed in 10.2.023-20240927 Patch available CNA
  • SysReturn (32-bit and 64-bit) VendorHowyar Technologies Affected before 10.2.02320240919 Fixed in 10.2.02320240919 Patch available CNA
  • SANFONG EZ-Back System VendorSANFONG Affected before 10.3.024-20241127 Fixed in 10.3.024-20241127 Patch available CNA
  • CES NeoImpact VendorCES Taiwan Affected before 10.1.024-20241127 Fixed in 10.1.024-20241127 Patch available CNA
  • HDD King VendorSignalComputer Affected before 10.3.021-20241127 Fixed in 10.3.021-20241127 Patch available CNA

CPE configurations NVD · 7

CPEVersionsRoleVendor
cpe:2.3:a:cs-grp:neo_impact:*:*:*:*:*:*:*:*before 10.1.024-20241127VulnerableCs-grp
cpe:2.3:a:greenware:greenguard:*:*:*:*:*:*:*:*before 10.2.023-20240927VulnerableGreenware
cpe:2.3:a:howyar:sysreturn:*:*:*:*:*:*:*:*before 10.2.023_20240919VulnerableHowyar
cpe:2.3:a:radix:smart_recovery:*:*:*:*:*:*:*:*before 11.2.023-20240927VulnerableRadix
cpe:2.3:a:sanfong:ez-back_system:*:*:*:*:*:*:*:*before 10.3.024-20241127VulnerableSANFONG
cpe:2.3:a:signalcomputer:hdd_king:*:*:*:*:*:*:*:*before 10.3.021-20241127VulnerableSignalComputer
cpe:2.3:a:wasay:erecoveryrx:*:*:*:*:*:*:*:*before 8.4.022-20241127VulnerableWasay
  • cpe:2.3:a:cs-grp:neo_impact:*:*:*:*:*:*:*:* Versions before 10.1.024-20241127 Vulnerable ·Cs-grp
  • cpe:2.3:a:greenware:greenguard:*:*:*:*:*:*:*:* Versions before 10.2.023-20240927 Vulnerable ·Greenware
  • cpe:2.3:a:howyar:sysreturn:*:*:*:*:*:*:*:* Versions before 10.2.023_20240919 Vulnerable ·Howyar
  • cpe:2.3:a:radix:smart_recovery:*:*:*:*:*:*:*:* Versions before 11.2.023-20240927 Vulnerable ·Radix
  • cpe:2.3:a:sanfong:ez-back_system:*:*:*:*:*:*:*:* Versions before 10.3.024-20241127 Vulnerable ·SANFONG
  • cpe:2.3:a:signalcomputer:hdd_king:*:*:*:*:*:*:*:* Versions before 10.3.021-20241127 Vulnerable ·SignalComputer
  • cpe:2.3:a:wasay:erecoveryrx:*:*:*:*:*:*:*:* Versions before 8.4.022-20241127 Vulnerable ·Wasay

Remediation

  • Fix · CNA SmartRecovery (Radix) Fixed in 11.2.023-20240927
  • Fix · CNA GreenGuard (Greenware Technologies) Fixed in 10.2.023-20240927
  • Fix · CNA SysReturn (32-bit and 64-bit) (Howyar Technologies) Fixed in 10.2.02320240919
  • Fix · CNA SANFONG EZ-Back System (SANFONG) Fixed in 10.3.024-20241127
  • Fix · CNA CES NeoImpact (CES Taiwan) Fixed in 10.1.024-20241127
  • Fix · CNA HDD King (SignalComputer) Fixed in 10.3.021-20241127

Vendor assessments

Red Hat

Red Hat's page for this CVE →

Not affected: 1 product
  • Red Hat

Timeline

  1. 2026-10-02 Threatist record created from CVE-2024-7344
  2. 2026-10-03 Alias added: GHSA-7xfj-4r7x-3733

References

Exploit 1

Patch 1

Advisory 1

Other 3

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences