cvedb.io
CVE-2022-4020
HIGH · CVSS 8.1
EPSS exploitation probability: 0%
Published 2022-11-28T13:15:10.180 · Last modified 2026-06-17T05:19:46.683

Summary

Vulnerability in the HQSwSmiDxe DXE driver on some consumer Acer Notebook devices may allow an attacker with elevated privileges to modify UEFI Secure Boot settings by modifying an NVRAM variable.

Affected products

acer — aspire_a315-22g_firmware

Does this affect you?

Add your gear to cvedb and we'll alert you only when acer ships something exploited.

Check my exposure →

References

This product uses data from the NVD API but is not endorsed or certified by the NVD. Informational only; not professional security advice.