← Database

CVE-2022-4020

HIGH CVSS: 8.1 Published: 2022-11-28 Modified: 2026-06-17

Description

Vulnerability in the HQSwSmiDxe DXE driver on some consumer Acer Notebook devices may allow an attacker with elevated privileges to modify UEFI Secure Boot settings by modifying an NVRAM variable.

Affected Platforms

Acer Extensa Ex215-21Acer Aspire A115-21 FirmwareAcer Extensa Ex215-21 FirmwareAcer Extensa Ex215-21G FirmwareAcer Extensa Ex215-21GAcer Aspire A315-22GAcer Aspire A115-21Acer Aspire A315-22 FirmwareAcer Aspire A315-22G FirmwareAcer Aspire A315-22

Weakness Type

CWE-276, CWE-276

References