Lucene search
+L

374 matches found

CNNVD
CNNVD
added 2022/11/28 12:00 a.m.10 views

Acer Extensa Series 安全漏洞

Acer Extensa Series is a line of laptops from Acer, a Chinese company. The Acer Extensa Series suffers from a security vulnerability that stems from its HQSwSmiDxe DXE driver that allows an attacker with elevated privileges to modify the UEFI Secure Boot settings by modifying the NVRAM variable...

8.2CVSS8AI score0.00239EPSS
SaveExploits0References2
OSV
OSV
added 2022/10/19 12:15 p.m.11 views

CVE-2022-41415

Acer Altos W2000h-W570h F4 R01.03.0018 was discovered to contain a stack overflow in the RevserveMem component. This vulnerability allows attackers to cause a Denial of Service DoS via injecting crafted shellcode into the NVRAM variable...

9.8CVSS5.8AI score0.00973EPSS
SaveExploits1References3
NVD
NVD
added 2022/10/19 12:15 p.m.33 views

CVE-2022-41415

Acer Altos W2000h-W570h F4 R01.03.0018 was discovered to contain a stack overflow in the RevserveMem component. This vulnerability allows attackers to cause a Denial of Service DoS via injecting crafted shellcode into the NVRAM variable...

9.8CVSS0.00973EPSS
SaveExploits1References1
Prion
Prion
added 2022/10/19 12:15 p.m.18 views

Stack overflow

Acer Altos W2000h-W570h F4 R01.03.0018 was discovered to contain a stack overflow in the RevserveMem component. This vulnerability allows attackers to cause a Denial of Service DoS via injecting crafted shellcode into the NVRAM variable...

7.5CVSS9.3AI score0.00973EPSS
SaveExploits1References3Affected Software1
CNNVD
CNNVD
added 2022/10/19 12:00 a.m.7 views

Acer Altos W2000h-W570h F4 缓冲区错误漏洞

Acer Altos W2000h-W570h F4 is a server from Acer China. It offers best-in-class performance, innovative technology, high configurability and comprehensive management features. A security vulnerability exists in Acer Altos W2000h-W570h F4 version R01.03.0018, which originates from a discovery...

9.8CVSS8.4AI score0.00973EPSS
SaveExploits1References4
Cvelist
Cvelist
added 2022/10/19 12:00 a.m.46 views

CVE-2022-41415

Acer Altos W2000h-W570h F4 R01.03.0018 was discovered to contain a stack overflow in the RevserveMem component. This vulnerability allows attackers to cause a Denial of Service DoS via injecting crafted shellcode into the NVRAM variable...

9.6AI score0.00973EPSS
SaveExploits1References1
CVE
CVE
added 2022/10/19 12:00 a.m.58 views

CVE-2022-41415

CVE-2022-41415 affects Acer Altos W2000h-W570h F4, version R01.03.0018. A stack overflow in the RevserveMem component allows an attacker to cause a Denial of Service by injecting crafted shellcode into the NVRAM variable. The public documentation consistently describes the affected component and ...

9.8CVSS9.4AI score0.00973EPSS
SaveExploits1References1Affected Software1
Vulnrichment
Vulnrichment
added 2022/10/19 12:00 a.m.9 views

CVE-2022-41415

Acer Altos W2000h-W570h F4 R01.03.0018 was discovered to contain a stack overflow in the RevserveMem component. This vulnerability allows attackers to cause a Denial of Service DoS via injecting crafted shellcode into the NVRAM variable...

7.6AI score0.00973EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
added 2022/10/19 12:00 a.m.7 views

PT-2022-25852 · Acer · Acer Altos W2000H-W570H F4

Name of the Vulnerable Software and Affected Versions: Acer Altos W2000h-W570h F4 version R01.03.0018 Description: A stack overflow was discovered in the RevserveMem component, allowing attackers to cause a Denial of Service DoS by injecting crafted shellcode into the NVRAM variable...

9.8CVSS9.3AI score0.00973EPSS
SaveExploits1References5
NVD
NVD
added 2022/09/23 12:15 a.m.21 views

CVE-2022-30426

There is a stack buffer overflow vulnerability, which could lead to arbitrary code execution in UEFI DXE driver on some Acer products. An attack could exploit this vulnerability to escalate privilege from ring 3 to ring 0, and hijack control flow during UEFI DXE execution. This affects Altos T110...

7.8CVSS0.00349EPSS
SaveExploits1References1
OSV
OSV
added 2022/09/23 12:15 a.m.8 views

CVE-2022-30426

There is a stack buffer overflow vulnerability, which could lead to arbitrary code execution in UEFI DXE driver on some Acer products. An attack could exploit this vulnerability to escalate privilege from ring 3 to ring 0, and hijack control flow during UEFI DXE execution. This affects Altos T110...

7.8CVSS6.5AI score0.00349EPSS
SaveExploits1References3
Prion
Prion
added 2022/09/23 12:15 a.m.20 views

Stack overflow

There is a stack buffer overflow vulnerability, which could lead to arbitrary code execution in UEFI DXE driver on some Acer products. An attack could exploit this vulnerability to escalate privilege from ring 3 to ring 0, and hijack control flow during UEFI DXE execution. This affects Altos T110...

4.3CVSS8.2AI score0.00349EPSS
SaveExploits1References3Affected Software34
Vulnrichment
Vulnrichment
added 2022/09/22 11:06 p.m.6 views

CVE-2022-30426

There is a stack buffer overflow vulnerability, which could lead to arbitrary code execution in UEFI DXE driver on some Acer products. An attack could exploit this vulnerability to escalate privilege from ring 3 to ring 0, and hijack control flow during UEFI DXE execution. This affects Altos T110...

8.4AI score0.00349EPSS
SaveExploits1References2
Cvelist
Cvelist
added 2022/09/22 11:06 p.m.35 views

CVE-2022-30426

There is a stack buffer overflow vulnerability, which could lead to arbitrary code execution in UEFI DXE driver on some Acer products. An attack could exploit this vulnerability to escalate privilege from ring 3 to ring 0, and hijack control flow during UEFI DXE execution. This affects Altos T110...

8.4AI score0.00349EPSS
SaveExploits1References1
CVE
CVE
added 2022/09/22 11:06 p.m.63 views

CVE-2022-30426

CVE-2022-30426 describes a stack buffer overflow in the UEFI DXE driver affecting a wide range of Acer products (Altos T110 F3, AP130 F2, Aspire series, Veriton, etc.). Root cause: overflow in the DXE driver enabling arbitrary code execution and privilege escalation from ring 3 to ring 0 during U...

7.8CVSS8.2AI score0.00349EPSS
SaveExploits1References1Affected Software1
CNNVD
CNNVD
added 2022/09/22 12:00 a.m.8 views

多款Acer产品缓冲区错误漏洞

Acer Aspire Series is a line of servers from Acer China. The security vulnerability in Acer products stems from the presence of a stack buffer overflow vulnerability, which could lead to the execution of arbitrary code in the UEFI DXE driver on certain Acer products. An attacker could elevate...

7.8CVSS8.2AI score0.00349EPSS
SaveExploits1References5
Positive Technologies
Positive Technologies
added 2022/09/22 12:00 a.m.8 views

PT-2022-7298 · Acer · Acer Veriton E430 +18

Name of the Vulnerable Software and Affected Versions: Acer Altos T110 F3 firmware version = P13 Acer AP130 F2 firmware version = P04 Acer Aspire 1600X firmware version = P11.A3L Acer Aspire 1602M firmware version = P11.A3L Acer Aspire 7600U firmware version = P11.A4 Acer Aspire MC605 firmware...

7.8CVSS7.8AI score0.00349EPSS
SaveExploits1References7
CNNVD
CNNVD
added 2022/09/09 12:00 a.m.9 views

aEnrich a+HRD 路径遍历漏洞

aEnrich a+HRD is a full-service human resources development solution from Acer aEnrich China. A path traversal vulnerability exists in aEnrich a+HRD Learning Management Key Performance Indicator System version 5.x. The vulnerability stems from a lack of input validation, and a Local File Inclusio...

8.1CVSS7.7AI score0.00913EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2022/04/07 12:00 a.m.9 views

aEnrich a+HRD 安全漏洞

aEnrich a+HRD is a full-service human resources development solution from Acer China aEnrich. The aEnrich a+HRD has a security vulnerability that allows an unauthenticated, remote attacker to control the system or disrupt services by uploading and executing malicious scripts using API functions...

9.8CVSS8.3AI score0.0134EPSS
SaveExploits0References2
ATTACKERKB
ATTACKERKB
added 2022/03/10 5:46 p.m.8 views

CVE-2022-24286

Acer QuickAccess 2.01.300x before 2.01.3030 and 3.00.30xx before 3.00.3038 contains a local privilege escalation vulnerability. The user process communicates with a service of system authority through a named pipe. In this case, the Named Pipe is also given Read and Write rights to the general...

7.8CVSS7.1AI score0.00225EPSS
SaveExploits0References2
Rows per page
Query Builder