Lucene search

[email protected]NVD:CVE-2022-30426

HistorySep 23, 2022 - 12:15 a.m.

CVE-2022-30426

2022-09-2300:15:09

CWE-787

[email protected]

web.nvd.nist.gov

7.8 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

0.001 Low

EPSS

Percentile

49.3%

JSON

There is a stack buffer overflow vulnerability, which could lead to arbitrary code execution in UEFI DXE driver on some Acer products. An attack could exploit this vulnerability to escalate privilege from ring 3 to ring 0, and hijack control flow during UEFI DXE execution. This affects Altos T110 F3 firmware version <= P13 (latest) and AP130 F2 firmware version <= P04 (latest) and Aspire 1600X firmware version <= P11.A3L (latest) and Aspire 1602M firmware version <= P11.A3L (latest) and Aspire 7600U firmware version <= P11.A4 (latest) and Aspire MC605 firmware version <= P11.A4L (latest) and Aspire TC-105 firmware version <= P12.B0L (latest) and Aspire TC-120 firmware version <= P11-A4 (latest) and Aspire U5-620 firmware version <= P11.A1 (latest) and Aspire X1935 firmware version <= P11.A3L (latest) and Aspire X3475 firmware version <= P11.A3L (latest) and Aspire X3995 firmware version <= P11.A3L (latest) and Aspire XC100 firmware version <= P11.B3 (latest) and Aspire XC600 firmware version <= P11.A4 (latest) and Aspire Z3-615 firmware version <= P11.A2L (latest) and Veriton E430G firmware version <= P21.A1 (latest) and Veriton B630_49 firmware version <= AAP02SR (latest) and Veriton E430 firmware version <= P11.A4 (latest) and Veriton M2110G firmware version <= P21.A3 (latest) and Veriton M2120G fir.

Affected configurations

NVD

Node

aceraltos_t110_f3Match-

AND

aceraltos_t110_f3_firmwareRange<p13

Node

acerap130_f2Match-

AND

acerap130_f2_firmwareRange<p04

Node

aceraspire_1600xMatch-

AND

aceraspire_1600x_firmwareRange<p11.a3l

Node

aceraspire_1602mMatch-

AND

aceraspire_1602m_firmwareRange<p11.a3l

Node

aceraspire_7600uMatch-

AND

aceraspire_7600u_firmwareRange<p11.a4

Node

aceraspire_mc605Match-

AND

aceraspire_mc605_firmwareRange<p11.a4l

Node

aceraspire_tc-105Match-

AND

aceraspire_tc-105_firmwareRange<p12.b0l

Node

aceraspire_tc-120Match-

AND

aceraspire_tc-120_firmwareRange<p11-a4

Node

aceraspire_u5-620Match-

AND

aceraspire_u5-620_firmwareRange<p11.a1

Node

aceraspire_x1935Match-

AND

aceraspire_x1935_firmwareRange<p11.a3l

Node

aceraspire_x3475Match-

AND

aceraspire_x3475_firmwareRange<p11.a3l

Node

aceraspire_x3995_firmwareRange<p11.a3l

AND

aceraspire_x3995Match-

Node

aceraspire_xc100_firmwareRange<p11.b3

AND

aceraspire_xc100Match-

Node

aceraspire_xc600_firmwareRange<p11.a4

AND

aceraspire_xc600Match-

Node

aceraspire_z3-615_firmwareRange<p11.a2l

AND

aceraspire_z3-615Match-

Node

acerveriton_b630_49_firmwareRange<aap02sr

AND

acerveriton_b630_49Match-

Node

acerveriton_e430g_firmwareRange<p21.a1

AND

acerveriton_e430gMatch-

Node

acerveriton_e430_firmwareRange<p11.a4

AND

acerveriton_e430Match-

Node

acerveriton_m2110g_firmwareRange<p21.a3

AND

acerveriton_m2110gMatch-

Node

acerveriton_m2120g_firmwareRange<p11-a3

AND

acerveriton_m2120gMatch-

Node

acerveriton_m2611g_firmwareRange<p11-b0l

AND

acerveriton_m2611gMatch-

Node

acerveriton_m2611_firmwareRange<p11.b0

AND

acerveriton_m2611Match-

Node

acerveriton_m4620_firmwareRange<p21.a3

AND

acerveriton_m4620Match-

Node

acerveriton_m4620g_firmwareRange<p21.a3

AND

acerveriton_m4620gMatch-

Node

acerveriton_m6620g_firmwareRange<p21.a0

AND

acerveriton_m6620gMatch-

Node

acerveriton_n2620g_firmwareRange<p21.b0

AND

acerveriton_n2620gMatch-

Node

acerveriton_n4620g_firmwareRange<p11.a2l

AND

acerveriton_n4620gMatch-

Node

acerveriton_n4630g_firmwareRange<p21.b0

AND

acerveriton_n4630gMatch-

Node

acerveriton_s6620g_firmwareRange<p11.a1

AND

acerveriton_s6620gMatch-

Node

acerveriton_x2611g_firmwareRange<p11.a4

AND

acerveriton_x2611gMatch-

Node

acerveriton_x2611_firmwareRange<p11.a4

AND

acerveriton_x2611Match-

Node

acerveriton_x4620g_firmwareRange<p11.a3

AND

acerveriton_x4620gMatch-

Node

acerveriton_x6620g_firmwareRange<p11.a3

AND

acerveriton_x6620gMatch-

Node

acerveriton_z2650g_firmwareRange<p21.a1

AND

acerveriton_z2650gMatch-

References

acer.com

altos.com

github.com/10TG/vulnerabilities/blob/main/Acer/CVE-2022-30426/CVE-2022-30426.md

7.8 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

0.001 Low

EPSS

Percentile

49.3%

JSON

Related for NVD:CVE-2022-30426

prion1 cvelist1 cve1