Lucene search
ESETCVELIST:CVE-2022-4020HistoryNov 28, 2022 - 1:00 p.m.
CVE-2022-4020 Acer Aspire BIOS vulnerability
2022-11-2813:00:01
CWE-276
ESET
www.cve.org
1
acer
aspire
bios
vulnerability
hqswsmidxe
dxe driver
consumer
notebook
devices
attacker
elevated privileges
uefi
secure boot
nvram
variable
CVSS3
8.1
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
HIGH
User Interaction
NONE
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:L/I:H/A:H
AI Score
8.3
Confidence
High
EPSS
0
Percentile
12.6%
Vulnerability in the HQSwSmiDxe DXE driver on some consumer Acer Notebook devices may allow an attacker with elevated privileges to modify UEFI Secure Boot settings by modifying an NVRAM variable.
CNA Affected
[
{
"defaultStatus": "unaffected",
"modules": [
"BIOS/firmware"
],
"product": "Aspire A315-22",
"vendor": "Acer",
"versions": [
{
"lessThan": "1.11",
"status": "affected",
"version": "1.04",
"versionType": "custom"
}
]
},
{
"defaultStatus": "unaffected",
"modules": [
"BIOS/firmware"
],
"product": "Aspire A115-21",
"vendor": "Acer",
"versions": [
{
"lessThan": "1.11",
"status": "affected",
"version": "1.04",
"versionType": "custom"
}
]
},
{
"defaultStatus": "unaffected",
"modules": [
"BIOS/firmware"
],
"product": "Aspire A315-22G",
"vendor": "Acer",
"versions": [
{
"lessThan": "1.11",
"status": "affected",
"version": "1.04",
"versionType": "custom"
}
]
},
{
"defaultStatus": "unaffected",
"modules": [
"BIOS/firmware"
],
"product": "Extensa EX215-21",
"vendor": "Acer",
"versions": [
{
"lessThan": "1.11",
"status": "affected",
"version": "1.04",
"versionType": "custom"
}
]
},
{
"defaultStatus": "unaffected",
"modules": [
"BIOS/firmware"
],
"product": "Extensa EX215-21G",
"vendor": "Acer",
"versions": [
{
"lessThan": "1.11",
"status": "affected",
"version": "1.04",
"versionType": "custom"
}
]
}
]Related
hackread
hackread
Acer Laptop Vulnerability Allows Malware Infection During Secure Boot
2022-11-29 22:08:15
nvd
nvd
CVE-2022-4020
2022-11-28 13:15:10
prion
prion
Design/Logic Flaw
2022-11-28 13:15:00
thn
thn
New Flaw in Acer Laptops Could Let Attackers Disable Secure Boot Protection
2022-11-29 16:39:00
cve
cve
CVE-2022-4020
2022-11-28 13:15:10
CVSS3
8.1
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
HIGH
User Interaction
NONE
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:L/I:H/A:H
AI Score
8.3
Confidence
High
EPSS
0
Percentile
12.6%
Related for CVELIST:CVE-2022-4020