CVE-2022-4020

8.2 highEPSS 0.2%

High (8.2) in acer. EPSS 0.2% chance of exploitation in the next 30 days.

Vulnerability in the HQSwSmiDxe DXE driver on some consumer Acer Notebook devices may allow an attacker with elevated privileges to modify UEFI Secure Boot settings by modifying an NVRAM variable.

Severity

CVSS 3.1

8.2 high

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H

EPSS: 0.2% chance of exploitation in the next 30 days; higher than 15% of CVEs (scores of 2026-10-31)
CWE: CWE-276
Published: 2022-11-28
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

acer:aspire_a115-21_firmware
acer:aspire_a315-22_firmware
acer:aspire_a315-22g_firmware
acer:extensa_ex215-21_firmware
acer:extensa_ex215-21g_firmware

References

https://community.acer.com/en/kb/articles/15520-security-vulnerability-regarding-vulnerability-that-may-allow-changes-to-secure-boot-settings
https://community.acer.com/en/kb/articles/15520-security-vulnerability-regarding-vulnerability-that-may-allow-changes-to-secure-boot-settings

Check your stack JSON