PT-2022-25278 · Acer · Acer Notebook

Martin Smolar · Published 2022-11-28 · Updated 2022-12-01 · CVE-2022-4020

Positive Technologies (AI Summary)

CVSS v3.1

8.1

High

Base vector

AV:L/AC:L/PR:H/UI:N/S:C/C:L/I:H/A:H

Name of the Vulnerable Software and Affected Versions Acer Notebook devices (affected versions not specified)

Description The issue concerns a vulnerability in the HQSwSmiDxe DXE driver that may allow an attacker with elevated privileges to modify UEFI Secure Boot settings by changing an NVRAM variable. This could potentially be exploited to disable Secure Boot protection, allowing attackers to intercept the OS boot process, load unsigned bootloaders, and deploy malicious payloads with system privileges. The vulnerability can be exploited in low-complexity attacks without requiring user interaction.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability. However, Acer recommends updating the BIOS to the latest version. As an alternative, clients can manually install the update on vulnerable systems.

Incorrect Default Permissions

Weakness Enumeration

CWE-276

Related Identifiers

CVE-2022-4020

Affected Products

Acer Notebook

References · 8

• https://nvd.nist.gov/vuln/detail/CVE-2022-4020 · Security Note
• https://community.acer.com/en/kb/articles/15520-security-vulnerability-regarding-vulnerability-that-may-allow-changes-to-secure-boot-settings · Vendor Advisory
• https://t.me/echeloneyes/919 · Telegram Post
• https://t.me/cibsecurity/53577 · Telegram Post
• https://t.me/pentestingnews/30623 · Telegram Post
• https://t.me/thehackernews/2811 · Telegram Post
• https://t.me/true_secator/3758 · Telegram Post
• https://t.me/cvenotify/38905 · Telegram Post