CVE-2022-30426

Published: Sep 23, 2022Modified: May 27, 2025

7.8

Vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Exploitability: 1.8 / Impact: 5.9

Source: NVD

Description

There is a stack buffer overflow vulnerability, which could lead to arbitrary code execution in UEFI DXE driver on some Acer products. An attack could exploit this vulnerability to escalate privilege from ring 3 to ring 0, and hijack control flow during UEFI DXE execution. This affects Altos T110 F3 firmware version <= P13 (latest) and AP130 F2 firmware version <= P04 (latest) and Aspire 1600X firmware version <= P11.A3L (latest) and Aspire 1602M firmware version <= P11.A3L (latest) and Aspire 7600U firmware version <= P11.A4 (latest) and Aspire MC605 firmware version <= P11.A4L (latest) and Aspire TC-105 firmware version <= P12.B0L (latest) and Aspire TC-120 firmware version <= P11-A4 (latest) and Aspire U5-620 firmware version <= P11.A1 (latest) and Aspire X1935 firmware version <= P11.A3L (latest) and Aspire X3475 firmware version <= P11.A3L (latest) and Aspire X3995 firmware version <= P11.A3L (latest) and Aspire XC100 firmware version <= P11.B3 (latest) and Aspire XC600 firmware version <= P11.A4 (latest) and Aspire Z3-615 firmware version <= P11.A2L (latest) and Veriton E430G firmware version <= P21.A1 (latest) and Veriton B630_49 firmware version <= AAP02SR (latest) and Veriton E430 firmware version <= P11.A4 (latest) and Veriton M2110G firmware version <= P21.A3 (latest) and Veriton M2120G fir.

Affected (34)

Acer

34 products

Altos T110 F3 Firmware

Ap130 F2 Firmware

Aspire 1600x Firmware

Aspire 1602m Firmware

Aspire 7600u Firmware

Aspire Mc605 Firmware

Aspire Tc 105 Firmware

Aspire Tc 120 Firmware

Aspire U5 620 Firmware

Aspire X1935 Firmware

Aspire X3475 Firmware

Aspire X3995 Firmware

Aspire Xc100 Firmware

Aspire Xc600 Firmware

Aspire Z3 615 Firmware

Veriton B630 49 Firmware

Veriton E430g Firmware

Veriton E430 Firmware

Veriton M2110g Firmware

Veriton M2120g Firmware

Veriton M2611g Firmware

Veriton M2611 Firmware

Veriton M4620 Firmware

Veriton M4620g Firmware

Veriton M6620g Firmware

Veriton N2620g Firmware

Veriton N4620g Firmware

Veriton N4630g Firmware

Veriton S6620g Firmware

Veriton X2611g Firmware

Veriton X2611 Firmware

Veriton X4620g Firmware

Veriton X6620g Firmware

Veriton Z2650g Firmware

Configuration A

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Acer Altos T110 F3 Firmware	Before p13

Running on/with	Platform Versions
Acer Altos T110 F3	All versions

Configuration B

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Acer Ap130 F2 Firmware	Before p04

Running on/with	Platform Versions
Acer Ap130 F2	All versions

Configuration C

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Acer Aspire 1600x Firmware	Before p11.a3l

Running on/with	Platform Versions
Acer Aspire 1600x	All versions

Configuration D

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Acer Aspire 1602m Firmware	Before p11.a3l

Running on/with	Platform Versions
Acer Aspire 1602m	All versions

Configuration E

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Acer Aspire 7600u Firmware	Before p11.a4

Running on/with	Platform Versions
Acer Aspire 7600u	All versions

Configuration F

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Acer Aspire Mc605 Firmware	Before p11.a4l

Running on/with	Platform Versions
Acer Aspire Mc605	All versions

Configuration G

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Acer Aspire Tc 105 Firmware	Before p12.b0l

Running on/with	Platform Versions
Acer Aspire Tc 105	All versions

Configuration H

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Acer Aspire Tc 120 Firmware	Before p11-a4

Running on/with	Platform Versions
Acer Aspire Tc 120	All versions

Configuration I

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Acer Aspire U5 620 Firmware	Before p11.a1

Running on/with	Platform Versions
Acer Aspire U5 620	All versions

Configuration J

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Acer Aspire X1935 Firmware	Before p11.a3l

Running on/with	Platform Versions
Acer Aspire X1935	All versions

Configuration K

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Acer Aspire X3475 Firmware	Before p11.a3l

Running on/with	Platform Versions
Acer Aspire X3475	All versions

Configuration L

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Acer Aspire X3995 Firmware	Before p11.a3l

Running on/with	Platform Versions
Acer Aspire X3995	All versions

Configuration M

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Acer Aspire Xc100 Firmware	Before p11.b3

Running on/with	Platform Versions
Acer Aspire Xc100	All versions

Configuration N

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Acer Aspire Xc600 Firmware	Before p11.a4

Running on/with	Platform Versions
Acer Aspire Xc600	All versions

Configuration O

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Acer Aspire Z3 615 Firmware	Before p11.a2l

Running on/with	Platform Versions
Acer Aspire Z3 615	All versions

Configuration P

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Acer Veriton B630 49 Firmware	Before aap02sr

Running on/with	Platform Versions
Acer Veriton B630 49	All versions

Configuration Q

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Acer Veriton E430g Firmware	Before p21.a1

Running on/with	Platform Versions
Acer Veriton E430g	All versions

Configuration R

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Acer Veriton E430 Firmware	Before p11.a4

Running on/with	Platform Versions
Acer Veriton E430	All versions

Configuration S

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Acer Veriton M2110g Firmware	Before p21.a3

Running on/with	Platform Versions
Acer Veriton M2110g	All versions

Configuration T

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Acer Veriton M2120g Firmware	Before p11-a3

Running on/with	Platform Versions
Acer Veriton M2120g	All versions

Configuration U

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Acer Veriton M2611g Firmware	Before p11-b0l

Running on/with	Platform Versions
Acer Veriton M2611g	All versions

Configuration V

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Acer Veriton M2611 Firmware	Before p11.b0

Running on/with	Platform Versions
Acer Veriton M2611	All versions

Configuration W

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Acer Veriton M4620 Firmware	Before p21.a3

Running on/with	Platform Versions
Acer Veriton M4620	All versions

Configuration X

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Acer Veriton M4620g Firmware	Before p21.a3

Running on/with	Platform Versions
Acer Veriton M4620g	All versions

Configuration Y

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Acer Veriton M6620g Firmware	Before p21.a0

Running on/with	Platform Versions
Acer Veriton M6620g	All versions

Configuration Z

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Acer Veriton N2620g Firmware	Before p21.b0

Running on/with	Platform Versions
Acer Veriton N2620g	All versions

Configuration A

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Acer Veriton N4620g Firmware	Before p11.a2l

Running on/with	Platform Versions
Acer Veriton N4620g	All versions

Configuration B

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Acer Veriton N4630g Firmware	Before p21.b0

Running on/with	Platform Versions
Acer Veriton N4630g	All versions

Configuration C

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Acer Veriton S6620g Firmware	Before p11.a1

Running on/with	Platform Versions
Acer Veriton S6620g	All versions

Configuration D

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Acer Veriton X2611g Firmware	Before p11.a4

Running on/with	Platform Versions
Acer Veriton X2611g	All versions

Configuration E

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Acer Veriton X2611 Firmware	Before p11.a4

Running on/with	Platform Versions
Acer Veriton X2611	All versions

Configuration F

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Acer Veriton X4620g Firmware	Before p11.a3

Running on/with	Platform Versions
Acer Veriton X4620g	All versions

Configuration G

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Acer Veriton X6620g Firmware	Before p11.a3

Running on/with	Platform Versions
Acer Veriton X6620g	All versions

Configuration H

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Acer Veriton Z2650g Firmware	Before p21.a1

Running on/with	Platform Versions
Acer Veriton Z2650g	All versions

Related CWEs

CWE-787

Out-of-bounds Write

The product writes data past the end, or before the beginning, of the intended buffer.

References (6)

http://acer.com

Source: cve@mitre.org

Vendor Advisory

http://altos.com

Source: cve@mitre.org

Broken Link

https://github.com/10TG/vulnerabilities/blob/main/Acer/CVE-2022-30426/CVE-2022-30426.md

Source: cve@mitre.org

ExploitThird Party Advisory

http://acer.com

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://altos.com

Source: af854a3a-2127-422b-91ae-364da2661108

Broken Link

https://github.com/10TG/vulnerabilities/blob/main/Acer/CVE-2022-30426/CVE-2022-30426.md

Source: af854a3a-2127-422b-91ae-364da2661108

ExploitThird Party Advisory

Timeline

No history available yet.