cve/2022/CVE-2022-4020.md

### [CVE-2022-4020](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4020)
![](https://img.shields.io/static/v1?label=Product&message=Aspire%20A115-21&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=Aspire%20A315-22&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=Aspire%20A315-22G&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=Extensa%20EX215-21&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=Extensa%20EX215-21G&color=blue)
![](https://img.shields.io/static/v1?label=Version&message=%3D%201.04%20&color=brighgreen)
![](https://img.shields.io/static/v1?label=Vulnerability&message=CWE-276%20Incorrect%20Default%20Permissions&color=brighgreen)

### Description

Vulnerability in the HQSwSmiDxe DXE driver on some consumer Acer Notebook devices may allow an attacker with elevated privileges to modify UEFI Secure Boot settings by modifying an NVRAM variable.

### POC

#### Reference
No PoCs from references.

#### Github
- https://github.com/ARPSyndicate/cvemon
- https://github.com/k0imet/pyfetch
- https://github.com/river-li/awesome-uefi-security