What is the severity of CVE-2022-30426?

CVE-2022-30426 is classified as a critical vulnerability due to its potential to allow arbitrary code execution via a stack buffer overflow.

How do I fix CVE-2022-30426?

To mitigate CVE-2022-30426, you should update the firmware of affected Acer products to the latest version provided by Acer.

Which Acer products are affected by CVE-2022-30426?

CVE-2022-30426 affects various Acer firmware versions, including those for the Acer Altos T110 F3, Acer Ap130 F2, and Acer Aspire series.

What type of vulnerability is CVE-2022-30426?

CVE-2022-30426 is a stack buffer overflow vulnerability in the UEFI DXE driver allowing privilege escalation.

Can CVE-2022-30426 be exploited remotely?

Yes, CVE-2022-30426 may be exploited remotely, enabling attackers to gain control over the system during UEFI DXE execution.

Vulnerability/
CVE-2022-30426

high

7.8

CWE

787 119

22/9/2022

3/8/2024

CVE-2022-30426: Buffer Overflow

First published: Thu Sep 22 2022(Updated: )

There is a stack buffer overflow vulnerability, which could lead to arbitrary code execution in UEFI DXE driver on some Acer products. An attack could exploit this vulnerability to escalate privilege from ring 3 to ring 0, and hijack control flow during UEFI DXE execution. This affects Altos T110 F3 firmware version <= P13 (latest) and AP130 F2 firmware version <= P04 (latest) and Aspire 1600X firmware version <= P11.A3L (latest) and Aspire 1602M firmware version <= P11.A3L (latest) and Aspire 7600U firmware version <= P11.A4 (latest) and Aspire MC605 firmware version <= P11.A4L (latest) and Aspire TC-105 firmware version <= P12.B0L (latest) and Aspire TC-120 firmware version <= P11-A4 (latest) and Aspire U5-620 firmware version <= P11.A1 (latest) and Aspire X1935 firmware version <= P11.A3L (latest) and Aspire X3475 firmware version <= P11.A3L (latest) and Aspire X3995 firmware version <= P11.A3L (latest) and Aspire XC100 firmware version <= P11.B3 (latest) and Aspire XC600 firmware version <= P11.A4 (latest) and Aspire Z3-615 firmware version <= P11.A2L (latest) and Veriton E430G firmware version <= P21.A1 (latest) and Veriton B630_49 firmware version <= AAP02SR (latest) and Veriton E430 firmware version <= P11.A4 (latest) and Veriton M2110G firmware version <= P21.A3 (latest) and Veriton M2120G fir.

Credit: cve@mitre.org

Affected Software	Affected Version	How to fix
Acer Altos T110 F3 Firmware	<p13
Acer Altos T110 F3
Acer AP130 F2	<p04
Acer AP130 F2
Acer Aspire 1600x	<p11.a3l
Acer Aspire 1600x Firmware
Acer Aspire 1602m Firmware	<p11.a3l
Acer Aspire 1602m Firmware
Acer Aspire 7600u	<p11.a4
Acer Aspire 7600u Firmware
Acer Aspire Mc605 Firmware	<p11.a4l
Acer Aspire Mc605 Firmware
Acer Aspire TC-105	<p12.b0l
Acer Aspire TC-105 Firmware
Acer Aspire TC-120	<p11-a4
Acer Aspire TC-120 Firmware
Acer Aspire U5-620	<p11.a1
Acer Aspire U5-620 Firmware
Acer Aspire X1935 Firmware	<p11.a3l
Acer Aspire X1935 Firmware
Acer Aspire X3475 Firmware	<p11.a3l
Acer Aspire X3475 Firmware
Acer Aspire X3995 Firmware	<p11.a3l
Acer Aspire X3995 Firmware
Acer Aspire XC100	<p11.b3
Acer Aspire XC100
Acer Aspire Xc600 Firmware	<p11.a4
Acer Aspire XC600
Acer Aspire Z3-615	<p11.a2l
Acer Aspire Z3-615 Firmware
Acer Veriton B630 49 Firmware	<aap02sr
Acer Veriton B630 49 Firmware
Acer Veriton E430 Firmware	<p21.a1
Acer Veriton E430g Firmware
Acer Veriton E430g Firmware	<p11.a4
Acer Veriton E430g
Acer Veriton M2110g	<p21.a3
Acer Veriton M2110g Firmware
Acer Veriton M2120g	<p11-a3
Acer Veriton M2120g Firmware
Acer Veriton M2611 Firmware	<p11-b0l
Acer Veriton M2611g Firmware
Acer Veriton M2611g Firmware	<p11.b0
Acer Veriton M2611g
Acer Veriton M4620g Firmware	<p21.a3
Acer Veriton M4620g
Acer Veriton M4620 Firmware	<p21.a3
Acer Veriton M4620g Firmware
Acer Veriton M6620g Firmware	<p21.a0
Acer Veriton M6620g Firmware
Acer Veriton N2620g Firmware	<p21.b0
Acer Veriton N2620g Firmware
Acer Veriton N4620g Firmware	<p11.a2l
Acer Veriton N4620g Firmware
Acer Veriton N4630g Firmware	<p21.b0
Acer Veriton N4630g Firmware
Acer Veriton S6620g Firmware	<p11.a1
Acer Veriton S6620g Firmware
Acer Veriton X2611g Firmware	<p11.a4
Acer Veriton X2611g Firmware
Acer Veriton X2611g Firmware	<p11.a4
Acer Veriton X2611g Firmware
Acer Veriton X4620g	<p11.a3
Acer Veriton X4620g Firmware
Acer Veriton X6620g	<p11.a3
Acer Veriton X6620g Firmware
Acer Veriton Z2650g	<p21.a1
Acer Veriton Z2650g Firmware

Never miss a vulnerability like this again

Reference Links

Frequently Asked Questions

What is the severity of CVE-2022-30426?
CVE-2022-30426 is classified as a critical vulnerability due to its potential to allow arbitrary code execution via a stack buffer overflow.
How do I fix CVE-2022-30426?
To mitigate CVE-2022-30426, you should update the firmware of affected Acer products to the latest version provided by Acer.
Which Acer products are affected by CVE-2022-30426?
CVE-2022-30426 affects various Acer firmware versions, including those for the Acer Altos T110 F3, Acer Ap130 F2, and Acer Aspire series.
What type of vulnerability is CVE-2022-30426?
CVE-2022-30426 is a stack buffer overflow vulnerability in the UEFI DXE driver allowing privilege escalation.
Can CVE-2022-30426 be exploited remotely?
Yes, CVE-2022-30426 may be exploited remotely, enabling attackers to gain control over the system during UEFI DXE execution.