Search/CVE-2022-4020
● CVE — High

CVE-2022-4020

VendoracerProductaspire a115-21 firmware, aspire a315-22 firmware, aspire a315-22g firmware, extensa ex215-21 firmware, extensa ex215-21g firmwareDiscoveredNov 28, 2022UpdatedNov 21, 2024

Vulnerability in the HQSwSmiDxe DXE driver on some consumer Acer Notebook devices may allow an attacker with elevated privileges to modify UEFI Secure Boot settings by modifying an NVRAM variable.

View graph Watch Export
CVSS v3.1
8.1 HIGH
EPSS
0.25%
probability of exploitation in 30 days
CISA KEV
Not listed
no confirmed exploitation reported
News coverage
0
sources referencing this CVE
Related IOCs
0
seen in the same coverage
EPSS Trend
Aug 16, 2026 → Sep 9, 2026
● 0.01pp
0.24% → 0.25% over 2 tracked changes
CVSS v3.1 Detail
Attack VectorLOCAL
Attack ComplexityLOW
Privileges RequiredHIGH
User InteractionNONE
ScopeCHANGED
ConfidentialityLOW
IntegrityHIGH
AvailabilityHIGH
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:L/I:H/A:H
Connections
6 relationships
Timeline
disclosure → media coverage
Nov 28, 2022
Disclosure — published as a CVE record. · last revised by NVD Nov 21, 2024