CVE-2024-8105: acer altos r680 f4
Vulnerability summary
CVE-2024-8105 is a medium (CVSS 6.4) vulnerability in acer altos r680 f4. EPSS estimates a 0.27% chance of exploitation in the next 30 days, higher than 18.6% of scored vulnerabilities.
Timeline
- 26-08-2024PublishedVulnerability first disclosed.
- 28-06-2026Last modifiedVulnerability information updated.
Description
A vulnerability exists in UEFI implementations that use a hard-coded software-based Platform Key (PK). An attacker in possession of the corresponding PK private key can sign arbitrary UEFI executables or firmware components, causing them to be trusted by affected systems and potentially bypassing UEFI Secure Boot trust validation.
CVSS metrics
2 scores · 2 sources · 1 version- NVDNIST6.4MediumCVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H
EPSS trend
Probability
0.27%
Chance of exploitation in the next 30 days
Percentile
19%
Versus all other CVEs
30-day change
0.00 pp
From 0.27% on 20-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeNo weakness data has been published for this record.
Affected systems
Gigabyte133 products
- b760m d2hx lite si (rev. 1.0)641b9c056a8fecdc3a572db60e00f0b0fed7722fe9cf377bc4b6ee9208423107
- c621 aorus xtreme (rev. 1.0)7edc3eecb5d5ed515e06f8130d875fcae07cb0c7bfaa2e4cd8d86862e5ecc256
- c621-sd8d6ad23c1fab3f0a2babb23e7907385e25a06801c2edd50d108e5b08f923855a8
- c621-su8 (rev. 1.0)b9017e90f6c47a9d9560cfd92206c4b2e624cd91cd7f0680fb75dd972ef9582d
- c621-wd12f528dbe55aba35bd4e5d55fe853afed41c54d78719765944a5ea74dbc062f4b5
Dell48 products
- alienware-13fe9e2b75babda09ba22a3e99494198e125188d9345bda2b961f10e98e6c2b784
- alienware-13-laptopcb25317443d65ba126174c8b7547c7d2f6c0288f859e2063436eb7b350d9bf62
- alienware-13-r2e6819bd24e063807336994f36e1b7cafbbec46c2679a365dde1b54b720a049e4
- alienware-15-r4608e410d1c0475dac58b1e8f36b477aa8d9e9f28d30ec89d44b550e36bbbaf47
- alienware-17-laptopd4ed519bd5e5ba2f027d00635494d485f19f3080d8baf6d711b190323294e216
Acer9 products
- altos r680 f4a2679a9595a104d70bddc024dbc4f65f0dc9d906f30a0d1ae6b996b14246a6c2
- altos r680s f4e5fdaabf11b236c5c7b040d674936e84db746a180ab9999317e16dcb77aeeba4
- aspire c22-1600d938d08543d35d4249a51057c1d9c62bb1f6440af19913c5feffcea47dd3de95
- aspire s 272bd2bfaf79a72eaca45e544e5c6a5bb842b292bdc229b8975b3101a4013e0d5f
- aspire s32-185629837e239487cc83818a7f40f9280d9692a50376487899edd603494b0f30e4c5
Fujitsu7 products
- au47 m1d3715136d50fc486ef59fb4aee1d7f06552fdf98423809939538fe905a1aa0b3
- multiplehttps://security.ts.fujitsu.com/ProductSecurity/content/Fujitsu-PSIRT-FJ-ISS-2024-072412-Security-Notice.pdf
- primergy cx270 s2e44c2088ee54191192cc690787d74d8ddbfe3fc97c58fb2c42cf8a952784c94f
- primergy cx420 s1 chassisc27a0e267f18a89c8ba8aadd37786ef8fe18162b60b45fc209bf992b570837af
- primergy rx100 s7pe71744d4e18cbee18a1fe381a8a83350487baa6cfbf3729d999f85d7b650610a
Aopen2 products
- iaplx-de(taa30 test)94c6f84946db100b505af8a308f69ef6cddc2e310b50641a6e2e63bc9aed54e0
- ikblmux-der(volta charging)fcd339e12730f057e41ad41228f9612d4954f2d0dbcfeef37e14dcdaf2866e05
Formelife1 product
- studio sys upda451ed9d6359fd109f495c75bab2678285265a72be64b3e5d0d5447a0e167cd5
6 vendors · 200 products · Showing 200 of 743. Use Open JSON for the complete list.
References
9 links- www.binarly.io/advisories/brly-2024-005Technical Description
- kb.cert.org/vuls/id/455367Third Party Advisory
- github.com/binarly-io/Vulnerability-REsearch/blob/main/PKfail/BRLY-2024-005.mdTechnical DescriptionSignature
- www.supermicro.com/en/support/security_PKFAIL_Jul_2024Vendor Advisory
- www.intel.com/content/…Vendor Advisory
- www.gigabyte.com/us/Support/Security/2205Vendor Advisory