CVE-2022-34301

CVE-2022-34301 is a medium-severity flaw in CryptoPro Secure Disk bootloaders prior to 2022-06-01, affecting products from KidAn, Microsoft, and Red Hat. This vulnerability allows an attacker with high privileges and access to the EFI System Partition to replace the existing signed bootloader, thereby bypassing or tampering with Secure Boot protections and executing arbitrary code in the pre-boot stage. While there is no known active exploitation or public exploit code (Metasploit, Nuclei, ExploitDB), the vulnerability has garnered significant community discussion and media coverage, indicating notable awareness.