High severity8.1NVD Advisory· Published Nov 28, 2022· Updated Jun 17, 2026

CVE-2022-4020

Description

Vulnerability in the HQSwSmiDxe DXE driver on some consumer Acer Notebook devices may allow an attacker with elevated privileges to modify UEFI Secure Boot settings by modifying an NVRAM variable.

Affected products

Acer/Aspire A115 21 Firmware
cpe:2.3:o:acer:aspire_a115-21_firmware:-:*:*:*:*:*:*:*
Acer/Aspire A315 22 Firmware
cpe:2.3:o:acer:aspire_a315-22_firmware:-:*:*:*:*:*:*:*
Acer/Aspire A315 22g Firmware
cpe:2.3:o:acer:aspire_a315-22g_firmware:-:*:*:*:*:*:*:*
Acer/Extensa Ex215 21 Firmware
cpe:2.3:o:acer:extensa_ex215-21_firmware:-:*:*:*:*:*:*:*
Acer/Extensa Ex215 21g Firmware
cpe:2.3:o:acer:extensa_ex215-21g_firmware:-:*:*:*:*:*:*:*
Acer/Notebookllm-create
Acer/Aspire A115-21v5
Range: 1.04
Acer/Aspire A315-22v5
Range: 1.04
Acer/Aspire A315-22Gv5
Range: 1.04
Acer/Extensa EX215-21v5
Range: 1.04
Acer/Extensa EX215-21Gv5
Range: 1.04

Patches

Vulnerability mechanics

References

community.acer.com/en/kb/articles/15520-security-vulnerability-regarding-vulnerability-that-may-allow-changes-to-secure-boot-settingsnvdVendor Advisory

News mentions

No linked articles in our index yet.

cvss	0.526
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000