Lucene search

[email protected]CVE-2022-30426

HistorySep 23, 2022 - 12:15 a.m.

CVE-2022-30426

2022-09-2300:15:09

CWE-787

[email protected]

web.nvd.nist.gov

cve-2022-30426

stack buffer overflow

uefi

acer products

arbitrary code execution

privilege escalation

7.8 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

0.001 Low

EPSS

Percentile

49.2%

JSON

There is a stack buffer overflow vulnerability, which could lead to arbitrary code execution in UEFI DXE driver on some Acer products. An attack could exploit this vulnerability to escalate privilege from ring 3 to ring 0, and hijack control flow during UEFI DXE execution. This affects Altos T110 F3 firmware version <= P13 (latest) and AP130 F2 firmware version <= P04 (latest) and Aspire 1600X firmware version <= P11.A3L (latest) and Aspire 1602M firmware version <= P11.A3L (latest) and Aspire 7600U firmware version <= P11.A4 (latest) and Aspire MC605 firmware version <= P11.A4L (latest) and Aspire TC-105 firmware version <= P12.B0L (latest) and Aspire TC-120 firmware version <= P11-A4 (latest) and Aspire U5-620 firmware version <= P11.A1 (latest) and Aspire X1935 firmware version <= P11.A3L (latest) and Aspire X3475 firmware version <= P11.A3L (latest) and Aspire X3995 firmware version <= P11.A3L (latest) and Aspire XC100 firmware version <= P11.B3 (latest) and Aspire XC600 firmware version <= P11.A4 (latest) and Aspire Z3-615 firmware version <= P11.A2L (latest) and Veriton E430G firmware version <= P21.A1 (latest) and Veriton B630_49 firmware version <= AAP02SR (latest) and Veriton E430 firmware version <= P11.A4 (latest) and Veriton M2110G firmware version <= P21.A3 (latest) and Veriton M2120G fir.

Affected configurations

NVD

Node

aceraltos_t110_f3Match-

AND

aceraltos_t110_f3_firmwareRange<p13

Node

acerap130_f2Match-

AND

acerap130_f2_firmwareRange<p04

Node

aceraspire_1600xMatch-

AND

aceraspire_1600x_firmwareRange<p11.a3l

Node

aceraspire_1602mMatch-

AND

aceraspire_1602m_firmwareRange<p11.a3l

Node

aceraspire_7600uMatch-

AND

aceraspire_7600u_firmwareRange<p11.a4

Node

aceraspire_mc605Match-

AND

aceraspire_mc605_firmwareRange<p11.a4l

Node

aceraspire_tc-105Match-

AND

aceraspire_tc-105_firmwareRange<p12.b0l

Node

aceraspire_tc-120Match-

AND

aceraspire_tc-120_firmwareRange<p11-a4

Node

aceraspire_u5-620Match-

AND

aceraspire_u5-620_firmwareRange<p11.a1

Node

aceraspire_x1935Match-

AND

aceraspire_x1935_firmwareRange<p11.a3l

Node

aceraspire_x3475Match-

AND

aceraspire_x3475_firmwareRange<p11.a3l

Node

aceraspire_x3995_firmwareRange<p11.a3l

AND

aceraspire_x3995Match-

Node

aceraspire_xc100_firmwareRange<p11.b3

AND

aceraspire_xc100Match-

Node

aceraspire_xc600_firmwareRange<p11.a4

AND

aceraspire_xc600Match-

Node

aceraspire_z3-615_firmwareRange<p11.a2l

AND

aceraspire_z3-615Match-

Node

acerveriton_b630_49_firmwareRange<aap02sr

AND

acerveriton_b630_49Match-

Node

acerveriton_e430g_firmwareRange<p21.a1

AND

acerveriton_e430gMatch-

Node

acerveriton_e430_firmwareRange<p11.a4

AND

acerveriton_e430Match-

Node

acerveriton_m2110g_firmwareRange<p21.a3

AND

acerveriton_m2110gMatch-

Node

acerveriton_m2120g_firmwareRange<p11-a3

AND

acerveriton_m2120gMatch-

Node

acerveriton_m2611g_firmwareRange<p11-b0l

AND

acerveriton_m2611gMatch-

Node

acerveriton_m2611_firmwareRange<p11.b0

AND

acerveriton_m2611Match-

Node

acerveriton_m4620_firmwareRange<p21.a3

AND

acerveriton_m4620Match-

Node

acerveriton_m4620g_firmwareRange<p21.a3

AND

acerveriton_m4620gMatch-

Node

acerveriton_m6620g_firmwareRange<p21.a0

AND

acerveriton_m6620gMatch-

Node

acerveriton_n2620g_firmwareRange<p21.b0

AND

acerveriton_n2620gMatch-

Node

acerveriton_n4620g_firmwareRange<p11.a2l

AND

acerveriton_n4620gMatch-

Node

acerveriton_n4630g_firmwareRange<p21.b0

AND

acerveriton_n4630gMatch-

Node

acerveriton_s6620g_firmwareRange<p11.a1

AND

acerveriton_s6620gMatch-

Node

acerveriton_x2611g_firmwareRange<p11.a4

AND

acerveriton_x2611gMatch-

Node

acerveriton_x2611_firmwareRange<p11.a4

AND

acerveriton_x2611Match-

Node

acerveriton_x4620g_firmwareRange<p11.a3

AND

acerveriton_x4620gMatch-

Node

acerveriton_x6620g_firmwareRange<p11.a3

AND

acerveriton_x6620gMatch-

Node

acerveriton_z2650g_firmwareRange<p21.a1

AND

acerveriton_z2650gMatch-

CPENameOperatorVersion
acer:altos_t110_f3_firmwareacer altos t110 f3 firmwareltp13

CPE	Name	Operator	Version
acer:altos_t110_f3_firmware	acer altos t110 f3 firmware	lt	p13

References

acer.com

altos.com

github.com/10TG/vulnerabilities/blob/main/Acer/CVE-2022-30426/CVE-2022-30426.md

Social References

7.8 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

0.001 Low

EPSS

Percentile

49.2%

JSON

Related for CVE-2022-30426

prion1 cvelist1 nvd1