CVE-2022-4020

🗓️ 28 Nov 2022 13:00:01Reported by ESETType

cve🔗 web.nvd.nist.gov📰️ 1 Media mentions👁 66 Views

Vulnerability in HQSwSmiDxe DXE driver on Acer Notebook device

Reporter	Title	Published	Views	Family All 11
Circl	CVE-2022-4020	28 Nov 202216:28	–	circl
CNNVD	Acer Extensa Series 安全漏洞	28 Nov 202200:00	–	cnnvd
Cvelist	CVE-2022-4020 Acer Aspire BIOS vulnerability	28 Nov 202213:00	–	cvelist
EUVD	EUVD-2022-51399	3 Oct 202520:07	–	euvd
HackRead	Acer Laptop Vulnerability Allows Malware Infection During Secure Boot	29 Nov 202222:08	–	hackread
NVD	CVE-2022-4020	28 Nov 202213:15	–	nvd
Prion	Design/Logic Flaw	28 Nov 202213:15	–	prion
Positive Technologies	PT-2022-25278 · Acer · Acer Notebook	28 Nov 202200:00	–	ptsecurity
RedhatCVE	CVE-2022-4020	5 Feb 202520:16	–	redhatcve
The Hacker News	New Flaw in Acer Laptops Could Let Attackers Disable Secure Boot Protection	29 Nov 202216:39	–	thn

NVD

Node

acer aspire_a315-22g_firmwareMatch-

AND

acer aspire_a315-22gMatch-

Node

acer aspire_a115-21_firmwareMatch-

AND

acer aspire_a115-21Match-

Node

acer aspire_a315-22_firmwareMatch-

AND

acer aspire_a315-22Match-

Node

acer extensa_ex215-21_firmwareMatch-

AND

acer extensa_ex215-21Match-

Node

acer extensa_ex215-21g_firmwareMatch-

AND

acer extensa_ex215-21gMatch-

[
  {
    "defaultStatus": "unaffected",
    "modules": [
      "BIOS/firmware"
    ],
    "product": "Aspire A315-22",
    "vendor": "Acer",
    "versions": [
      {
        "lessThan": "1.11",
        "status": "affected",
        "version": "1.04",
        "versionType": "custom"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "modules": [
      "BIOS/firmware"
    ],
    "product": "Aspire A115-21",
    "vendor": "Acer",
    "versions": [
      {
        "lessThan": "1.11",
        "status": "affected",
        "version": "1.04",
        "versionType": "custom"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "modules": [
      "BIOS/firmware"
    ],
    "product": "Aspire A315-22G",
    "vendor": "Acer",
    "versions": [
      {
        "lessThan": "1.11",
        "status": "affected",
        "version": "1.04",
        "versionType": "custom"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "modules": [
      "BIOS/firmware"
    ],
    "product": "Extensa EX215-21",
    "vendor": "Acer",
    "versions": [
      {
        "lessThan": "1.11",
        "status": "affected",
        "version": "1.04",
        "versionType": "custom"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "modules": [
      "BIOS/firmware"
    ],
    "product": "Extensa EX215-21G",
    "vendor": "Acer",
    "versions": [
      {
        "lessThan": "1.11",
        "status": "affected",
        "version": "1.04",
        "versionType": "custom"
      }
    ]
  }
]

Source	Link
community	www.community.acer.com/en/kb/articles/15520-security-vulnerability-regarding-vulnerability-that-may-allow-changes-to-secure-boot-settings

21 Nov 2024 07:34Current

8High risk

Vulners AI Score8

CVSS 3.18.1 - 8.2

EPSS0.00141

SSVC

CWE-276