MSI mother boards

[kc1di]

This may be of interest to those who have MSI Motherboards.

MSI accidentally breaks Secure Boot for hundreds of motherboards

Over 290 MSI motherboards are reportedly affected by an insecure default UEFI Secure Boot setting settings that allows any operating system image to run regardless of whether it has a wrong or missing signature.

www.bleepingcomputer.com

 

[forester]

Interesting find! What models -- do you know?

 

[kc1di]

Interesting find! What models -- do you know?

nope only know what's in the article.

 

[f33dm3bits]

Interesting find! What models -- do you know?

A Github issue is mentioned in the article.

MSI has very insecure Secure Boot defaults · Issue #181 · Foxboron/sbctl

Some MSI motherboards with some firmware versions by default allow booting binaries on policy violations, thereby not providing any additional security compared to having Secure Boot disabled. Scro...

github.com

Mine was effected: MPG Z390 GAMING EDGE AC: 7B17vAC3 (2022-10-14) [2022-10-13]

 

[KGIII]

A quick look through, I think I have a laptop that's affected.

Alas, I use legacy BIOS on that device, lacking secure boot. So, in reality, I guess I'm not really at any additional risk.

 

[f33dm3bits]

It's possible just to flash your motherboard again with an older uefi firmware version, I just tried it and an running on an old version again.

 

[Alexzee]

Would the fdupdmgr update cmd for updating the firmware help?

 

[forester]

A Github issue is mentioned in the article.

MSI has very insecure Secure Boot defaults · Issue #181 · Foxboron/sbctl

Some MSI motherboards with some firmware versions by default allow booting binaries on policy violations, thereby not providing any additional security compared to having Secure Boot disabled. Scro...

github.com

Mine was effected: MPG Z390 GAMING EDGE AC: 7B17vAC3 (2022-10-14) [2022-10-13]

That's a lot of motherboards! Thanks for the link!

 

[kc1di]

Makes me glad I got rid of my MSI board a few years ago. But then on the other hand I don't dual boot and use only legacy on my installs.

 

[Alexzee]

Makes me glad I got rid of my MSI board a few years ago. But then on the other hand I don't dual boot and use only legacy on my installs.

Me too. I got rid of my old desktop that had a MSI mobo.

Dual booting and or triple booting has went well for me on this Asus Tuf Gaming mobo!

Good article kc1d thanks for posting it!