CVE-2022-4020 — Acer Aspire BIOS vulnerability

Description (CNA)

Vulnerability in the HQSwSmiDxe DXE driver on some consumer Acer Notebook devices may allow an attacker with elevated privileges to modify UEFI Secure Boot settings by modifying an NVRAM variable.

Affected (CNA)

Vendor / product	Versions
Acer / Aspire A315-22	affected 1.04 before 1.11
Acer / Aspire A115-21	affected 1.04 before 1.11
Acer / Aspire A315-22G	affected 1.04 before 1.11
Acer / Extensa EX215-21	affected 1.04 before 1.11
Acer / Extensa EX215-21G	affected 1.04 before 1.11

CWE

CWE-276

References

https://community.acer.com/en/kb/articles/15520-security-vulnerability-regarding-vulnerability-that-may-allow-changes-to-secure-boot-settings

ADP enrichment

CVE

No English description supplied.

https://community.acer.com/en/kb/articles/15520-security-vulnerability-regarding-vulnerability-that-may-allow-changes-to-secure-boot-settings

CISA-ADP

No English description supplied.

No references supplied.