CVEvulnerability
CVE-2022-4020
8.2 HIGH
Official page ↗
- Status
- Modified
- Published
- 2022-11-28
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 8.1 HIGH — CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:L/I:H/A:H
- CVSS 3.1 ([email protected])
- 8.2 HIGH — CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H
- Weaknesses
- CWE-276
Description
Vulnerability in the HQSwSmiDxe DXE driver on some consumer Acer Notebook devices may allow an attacker with elevated privileges to modify UEFI Secure Boot settings by modifying an NVRAM variable.
Affected configurations
• acer aspire a315-22g firmware
• acer aspire a115-21 firmware
• acer aspire a315-22 firmware
• acer extensa ex215-21 firmware
• acer extensa ex215-21g firmware
Related
Weakness · CWE (1)
- CWE-276 Incorrect Default Permissions weakness
References
- https://community.acer.com/en/kb/articles/15520-security-vulnerability-regarding-vulnerability-that-may-allow-changes-to-secure-boot-settings Vendor Advisory
- https://community.acer.com/en/kb/articles/15520-security-vulnerability-regarding-vulnerability-that-may-allow-changes-to-secure-boot-settings Vendor Advisory