CVE Feed

    Dashboard / CVE / CVE-2022-30426

    CVE-2022-30426

    There is a stack buffer overflow vulnerability, which could lead to arbitrary code execution in UEFI DXE driver on some Acer products. An attack could exploit this vulnerability to escalate privilege from ring 3 to ring 0, and hijack control flow during UEFI DXE execution. This affects Altos T110 F3 firmware version <= P13 (latest) and AP130 F2 firmware version <= P04 (latest) and Aspire 1600X firmware version <= P11.A3L (latest) and Aspire 1602M firmware version <= P11.A3L (latest) and Aspire 7600U firmware version <= P11.A4 (latest) and Aspire MC605 firmware version <= P11.A4L (latest) and Aspire TC-105 firmware version <= P12.B0L (latest) and Aspire TC-120 firmware version <= P11-A4 (latest) and Aspire U5-620 firmware version <= P11.A1 (latest) and Aspire X1935 firmware version <= P11.A3L (latest) and Aspire X3475 firmware version <= P11.A3L (latest) and Aspire X3995 firmware version <= P11.A3L (latest) and Aspire XC100 firmware version <= P11.B3 (latest) and Aspire XC600 firmware version <= P11.A4 (latest) and Aspire Z3-615 firmware version <= P11.A2L (latest) and Veriton E430G firmware version <= P21.A1 (latest) and Veriton B630_49 firmware version <= AAP02SR (latest) and Veriton E430 firmware version <= P11.A4 (latest) and Veriton M2110G firmware version <= P21.A3 (latest) and Veriton M2120G fir.

    Published:Sep 22, 2022
    Last Modified:May 27, 2025
    EPS:Sep 22, 2022
    EPSS Score:0.00057
    CVSS Score:7.8

    Affected Products

    Vendor
    Acer
    Product
    Altos T110 F3
    Vendor
    Acer
    Product
    Altos T110 F3 Firmware
    Vendor
    Acer
    Product
    Ap130 F2
    Vendor
    Acer
    Product
    Ap130 F2 Firmware
    Vendor
    Acer
    Product
    Aspire 1600x
    Vendor
    Acer
    Product
    Aspire 1600x Firmware
    Vendor
    Acer
    Product
    Aspire 1602m
    Vendor
    Acer
    Product
    Aspire 1602m Firmware
    Vendor
    Acer
    Product
    Aspire 7600u
    Vendor
    Acer
    Product
    Aspire 7600u Firmware
    Vendor
    Acer
    Product
    Aspire Mc605
    Vendor
    Acer
    Product
    Aspire Mc605 Firmware
    Vendor
    Acer
    Product
    Aspire Tc-105
    Vendor
    Acer
    Product
    Aspire Tc-105 Firmware
    Vendor
    Acer
    Product
    Aspire Tc-120
    Vendor
    Acer
    Product
    Aspire Tc-120 Firmware
    Vendor
    Acer
    Product
    Aspire U5-620
    Vendor
    Acer
    Product
    Aspire U5-620 Firmware
    Vendor
    Acer
    Product
    Aspire X1935
    Vendor
    Acer
    Product
    Aspire X1935 Firmware
    Vendor
    Acer
    Product
    Aspire X3475
    Vendor
    Acer
    Product
    Aspire X3475 Firmware
    Vendor
    Acer
    Product
    Aspire X3995
    Vendor
    Acer
    Product
    Aspire X3995 Firmware
    Vendor
    Acer
    Product
    Aspire Xc100
    Vendor
    Acer
    Product
    Aspire Xc100 Firmware
    Vendor
    Acer
    Product
    Aspire Xc600
    Vendor
    Acer
    Product
    Aspire Xc600 Firmware
    Vendor
    Acer
    Product
    Aspire Z3-615
    Vendor
    Acer
    Product
    Aspire Z3-615 Firmware
    Vendor
    Acer
    Product
    Veriton B630 49
    Vendor
    Acer
    Product
    Veriton B630 49 Firmware
    Vendor
    Acer
    Product
    Veriton E430
    Vendor
    Acer
    Product
    Veriton E430 Firmware
    Vendor
    Acer
    Product
    Veriton E430g
    Vendor
    Acer
    Product
    Veriton E430g Firmware
    Vendor
    Acer
    Product
    Veriton M2110g
    Vendor
    Acer
    Product
    Veriton M2110g Firmware
    Vendor
    Acer
    Product
    Veriton M2120g
    Vendor
    Acer
    Product
    Veriton M2120g Firmware
    Vendor
    Acer
    Product
    Veriton M2611
    Vendor
    Acer
    Product
    Veriton M2611 Firmware
    Vendor
    Acer
    Product
    Veriton M2611g
    Vendor
    Acer
    Product
    Veriton M2611g Firmware
    Vendor
    Acer
    Product
    Veriton M4620
    Vendor
    Acer
    Product
    Veriton M4620 Firmware
    Vendor
    Acer
    Product
    Veriton M4620g
    Vendor
    Acer
    Product
    Veriton M4620g Firmware
    Vendor
    Acer
    Product
    Veriton M6620g
    Vendor
    Acer
    Product
    Veriton M6620g Firmware
    Vendor
    Acer
    Product
    Veriton N2620g
    Vendor
    Acer
    Product
    Veriton N2620g Firmware
    Vendor
    Acer
    Product
    Veriton N4620g
    Vendor
    Acer
    Product
    Veriton N4620g Firmware
    Vendor
    Acer
    Product
    Veriton N4630g
    Vendor
    Acer
    Product
    Veriton N4630g Firmware
    Vendor
    Acer
    Product
    Veriton S6620g
    Vendor
    Acer
    Product
    Veriton S6620g Firmware
    Vendor
    Acer
    Product
    Veriton X2611
    Vendor
    Acer
    Product
    Veriton X2611 Firmware
    Vendor
    Acer
    Product
    Veriton X2611g
    Vendor
    Acer
    Product
    Veriton X2611g Firmware
    Vendor
    Acer
    Product
    Veriton X4620g
    Vendor
    Acer
    Product
    Veriton X4620g Firmware
    Vendor
    Acer
    Product
    Veriton X6620g
    Vendor
    Acer
    Product
    Veriton X6620g Firmware
    Vendor
    Acer
    Product
    Veriton Z2650g
    Vendor
    Acer
    Product
    Veriton Z2650g Firmware

    Exploits

    https://github.com/10TG/vulnerabilities/blob/main/Acer/CVE-2022-30426/CVE-2022-30426.mdhttps://github.com/10TG/vulnerabilities/blob/main/Acer/CVE-2022-30426/CVE-2022-30426.md

    Common Weakness Enumeration

    CWE-787 Out-of-bounds Write

    Common Attack Pattern Enumeration and Classification (CAPEC)

    No CAPEC recorded yet

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High