Skip to content
OpenAdvisories
High · 8.1 CVE-2022-4020 EUVD-2022-51399GHSA-42r4-ffjv-m633

Acer Aspire BIOS vulnerability

Published Nov 28, 2022 · Updated Apr 14, 2025 · Assigned by ESET

Description

Vulnerability in the HQSwSmiDxe DXE driver on some consumer Acer Notebook devices may allow an attacker with elevated privileges to modify UEFI Secure Boot settings by modifying an NVRAM variable.

Affected products

VendorProductAffectedFixed
Acer Aspire A315-22 1.04 – < 1.11 1.11
Acer Aspire A115-21 1.04 – < 1.11 1.11
Acer Aspire A315-22G 1.04 – < 1.11 1.11
Acer Extensa EX215-21 1.04 – < 1.11 1.11
Acer Extensa EX215-21G 1.04 – < 1.11 1.11

References