Skip to content
OpenAdvisories
High · 8.2 Public exploit CVE-2024-7344 EUVD-2024-48259GHSA-7xfj-4r7x-3733

Howyar UEFI Application "Reloader" (32-bit and 64-bit) is vulnerable to execution of unsigned software in a hardcoded path.

Published Jan 14, 2025 · Updated Sep 15, 2025 · Assigned by certcc

Vendor: CES Taiwan Vendor: Greenware Technologies Vendor: Howyar Vendor: Radix Vendor: SANFONG Vendor: SignalComputer Product: CES NeoImpact Product: GreenGuard Product: HDD King Product: SANFONG EZ-Back System Product: SmartRecovery Product: SysReturn (32-bit and 64-bit)

Description

Howyar UEFI Application "Reloader" (32-bit and 64-bit) is vulnerable to execution of unsigned software in a hardcoded path.

Affected products

VendorProductAffectedFixed
Radix SmartRecovery < 11.2.023-20240927 11.2.023-20240927
Greenware Technologies GreenGuard < 10.2.023-20240927 10.2.023-20240927
Howyar Technologies SysReturn (32-bit and 64-bit) < 10.2.02320240919 10.2.02320240919
SANFONG SANFONG EZ-Back System < 10.3.024-20241127 10.3.024-20241127
CES Taiwan CES NeoImpact < 10.1.024-20241127 10.1.024-20241127
SignalComputer HDD King < 10.3.021-20241127 10.3.021-20241127

Public exploits

Exploit or proof-of-concept code for this vulnerability is publicly available, which lowers the bar for attackers. Treat it as a reason to patch sooner.

Third-party code, not reviewed by us. Public PoCs are sometimes fake or contain malware. Read the code first and run it only in an isolated lab, against systems you are authorised to test.

GitHub 3 repositories

  • TheMalwareGuardian/CVE-2026-79298 ★ 2 · Sep 11, 2026

    CVE-2026-79298 - Incomplete remediation of UEFI Secure Boot bypass in Howyar SysReturn. The IA-32 boot path (BOOTia32.efi) was never patched after CVE-2024-7344, shipping the same revoked custom PE l…

  • TheMalwareGuardian/UEFI-Security-Research-Howyar-SysReturn-NetCopy ★ 2 · Jun 15, 2026

    Post CVE-2024-7344 analysis of Howyar SysReturn NetCopy - reverse engineering notes, vulnerable binaries, vendor correspondence, and proof-of-concept tooling for CVE-2026-79298 (IA-32 Secure Boot byp…

  • TheMalwareGuardian/CVE-2024-7344 ★ 0 · Feb 8, 2026

    Research on CVE-2024-7344, a Secure Boot bypass affecting Howyar SysReturn through an untrusted EFI payload loading mechanism.

Sources: PoC-in-GitHub, Metasploit Framework, Exploit-DB — updated daily. Only links are listed; no exploit code is hosted here.

Advisories 3

References