CVE-2022-4020
High
Description
Vulnerability in the HQSwSmiDxe DXE driver on some consumer Acer Notebook devices may allow an attacker with elevated privileges to modify UEFI Secure Boot settings by modifying an NVRAM variable.
SeverityHigh
CVSS8.1
Exploit probability—
ProductAcer Aspire A315-22g Firmware
PublishedNov 28, 2022
First seenNov 28, 2022
Weakness typeCWE-276CWE-276
How to fix
Sources list no fixed version or patch link for this vulnerability.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| acer aspire_a315-22g_firmware | No range specified | — |
| acer aspire_a115-21_firmware | No range specified | — |
| acer aspire_a315-22_firmware | No range specified | — |
| acer extensa_ex215-21_firmware | No range specified | — |
| acer extensa_ex215-21g_firmware | No range specified | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.