CVE-2022-40080: High severity acer aspire e5-475g firmware vulnerability
Stack overflow vulnerability in Aspire E5-475G 's BIOS firmware, in the FpGui module, a second call to GetVariable services allows local attackers to execute arbitrary code in the UEFI DXE phase and gain escalated privileges.
Affected Software
Event History
Frequently Asked Questions
What is CVE-2022-40080 vulnerability?
CVE-2022-40080 is a stack overflow vulnerability in Aspire E5-475G's BIOS firmware, which allows local attackers to execute arbitrary code and gain escalated privileges.
What is the severity of CVE-2022-40080?
CVE-2022-40080 has a severity rating of 7.8 (high).
How does CVE-2022-40080 affect Acer Aspire E5-475g?
CVE-2022-40080 affects Acer Aspire E5-475g's BIOS firmware version 1.21.
How can I fix CVE-2022-40080 vulnerability?
To fix CVE-2022-40080, it is recommended to update the BIOS firmware of Acer Aspire E5-475g to a non-vulnerable version.
Where can I find more information about CVE-2022-40080?
More information about CVE-2022-40080 can be found on Acer's website and the GitHub repository provided in the references.