Vulnerability in the HQSwSmiDxe DXE driver on some consumer Acer Notebook devices may allow an attacker with elevated privileges to modify UEFI Secure Boot settings by modifying an NVRAM variable.
References
Configurations
Configuration 1 (hide)
AND |
|
Configuration 2 (hide)
AND |
|
Configuration 3 (hide)
AND |
|
Configuration 4 (hide)
AND |
|
Configuration 5 (hide)
AND |
|
History
07 Nov 2023, 03:56
Type | Values Removed | Values Added |
---|---|---|
Summary | Vulnerability in the HQSwSmiDxe DXE driver on some consumer Acer Notebook devices may allow an attacker with elevated privileges to modify UEFI Secure Boot settings by modifying an NVRAM variable. |
Information
Published : 2022-11-28 13:15
Updated : 2024-02-28 19:51
NVD link : CVE-2022-4020
Mitre link : CVE-2022-4020
CVE.ORG link : CVE-2022-4020
JSON object : View
Products Affected
acer
- aspire_a115-21
- aspire_a115-21_firmware
- aspire_a315-22g_firmware
- extensa_ex215-21g_firmware
- aspire_a315-22_firmware
- aspire_a315-22g
- aspire_a315-22
- extensa_ex215-21
- extensa_ex215-21g
- extensa_ex215-21_firmware
CWE
CWE-276
Incorrect Default Permissions