VULNERABILITY INTELLIGENCE

CVE-2022-4020

CVSS score8.1 HIGH
EPSS probability0.25%
CISA KEVNot currently listed
Published2022-11-28
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:L/I:H/A:H

Description

Vulnerability in the HQSwSmiDxe DXE driver on some consumer Acer Notebook devices may allow an attacker with elevated privileges to modify UEFI Secure Boot settings by modifying an NVRAM variable.

Weakness classification

  • security@eset.com: CWE-276
  • nvd@nist.gov: CWE-276

Primary references