CVE-2022-4020: Acer Aspire a115-21 Firmware

High severity, CVSS 8.2. EPSS: 0.2% chance of exploitation in the next 30 days.

Vulnerability in the HQSwSmiDxe DXE driver on some consumer Acer Notebook devices may allow an attacker with elevated privileges to modify UEFI Secure Boot settings by modifying an NVRAM variable.

Affected products

• Acer Aspire a115-21 Firmware: affected versions not specified
• Acer Aspire a315-22 Firmware: affected versions not specified
• Acer Aspire a315-22g Firmware: affected versions not specified
• Acer Extensa EX215-21 Firmware: affected versions not specified
• Acer Extensa EX215-21g Firmware: affected versions not specified

Published 2022-11-28. Last modified 2026-06-17.