1. Home
  2. CVE Database
  3. CVE-2022-4020
HIGH · 8.1

CVE-2022-4020

Vulnerability in the HQSwSmiDxe DXE driver on some consumer Acer Notebook devices may allow an attacker with elevated privileges to modify UEFI Secure Boot settings by modifying an NVRAM variable.

Vulnerability Description

Vulnerability in the HQSwSmiDxe DXE driver on some consumer Acer Notebook devices may allow an attacker with elevated privileges to modify UEFI Secure Boot settings by modifying an NVRAM variable.

CVSS Score

8.1

HIGH

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:L/I:H/A:H
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
HIGH
User Interaction
NONE
Scope
CHANGED
Confidentiality
LOW
Integrity
HIGH
Availability
HIGH

Affected Products

VendorProductVersions
AcerAspire A315-22G Firmware-
AcerAspire A315-22G-
AcerAspire A115-21 Firmware-
AcerAspire A115-21-
AcerAspire A315-22 Firmware-
AcerAspire A315-22-
AcerExtensa Ex215-21 Firmware-
AcerExtensa Ex215-21-
AcerExtensa Ex215-21G Firmware-
AcerExtensa Ex215-21G-

Related Weaknesses (CWE)

CWE-276

References

FAQ

What is CVE-2022-4020?

CVE-2022-4020 is a vulnerability with a CVSS score of 8.1 (HIGH). Vulnerability in the HQSwSmiDxe DXE driver on some consumer Acer Notebook devices may allow an attacker with elevated privileges to modify UEFI Secure Boot settings by modifying an NVRAM variable.

How severe is CVE-2022-4020?

CVE-2022-4020 has been rated HIGH with a CVSS base score of 8.1/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2022-4020?

Check the references section above for vendor advisories and patch information. Affected products include: Acer Aspire A315-22G Firmware, Acer Aspire A315-22G, Acer Aspire A115-21 Firmware, Acer Aspire A115-21, Acer Aspire A315-22 Firmware.