CVE-2022-30426

HIGH

7.8

CVSS Score

Published: September 22, 2022 at 11:06 PM UTC

Updated: July 9, 2026 at 01:17 AM UTC

68 products affected across 1 vendorVeriton S6620G FirmwareVeriton X6620G FirmwareVeriton E430 Firmware

Using N/A by N/A?

Get instant alerts when new vulnerabilities affect N/A - before attackers find them.

Real-time alertsTrack your software stackFree plan available

Start Free Sign In

Severity

HIGH7.8

Exploit prediction

EPSS 0.4%

SSVC

PoC

Description

There is a stack buffer overflow vulnerability, which could lead to arbitrary code execution in UEFI DXE driver on some Acer products. An attack could exploit this vulnerability to escalate privilege from ring 3 to ring 0, and hijack control flow during UEFI DXE execution. This affects Altos T110 F3 firmware version <= P13 (latest) and AP130 F2 firmware version <= P04 (latest) and Aspire 1600X firmware version <= P11.A3L (latest) and Aspire 1602M firmware version <= P11.A3L (latest) and Aspire 7600U firmware version <= P11.A4 (latest) and Aspire MC605 firmware version <= P11.A4L (latest) and Aspire TC-105 firmware version <= P12.B0L (latest) and Aspire TC-120 firmware version <= P11-A4 (latest) and Aspire U5-620 firmware version <= P11.A1 (latest) and Aspire X1935 firmware version <= P11.A3L (latest) and Aspire X3475 firmware version <= P11.A3L (latest) and Aspire X3995 firmware version <= P11.A3L (latest) and Aspire XC100 firmware version <= P11.B3 (latest) and Aspire XC600 firmware version <= P11.A4 (latest) and Aspire Z3-615 firmware version <= P11.A2L (latest) and Veriton E430G firmware version <= P21.A1 (latest) and Veriton B630_49 firmware version <= AAP02SR (latest) and Veriton E430 firmware version <= P11.A4 (latest) and Veriton M2110G firmware version <= P21.A3 (latest) and Veriton M2120G fir.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

Altos T110 F3 Firmware · Acer

95%

v < p13

Affected range stops below p13, so it looks safe — our inference, not a vendor statement

acer-altos-t110-f3 (same device)

AP130 F2 Firmware · Acer

95%

v < p04

Affected range stops below p04, so it looks safe — our inference, not a vendor statement

acer-ap130-f2 (same device)

Aspire 1600X Firmware · Acer

95%

v < p11.a3l

Affected range stops below p11.a3l, so it looks safe — our inference, not a vendor statement

acer-aspire-1600x (same device)

Aspire 1602M Firmware · Acer

95%

v < p11.a3l

Affected range stops below p11.a3l, so it looks safe — our inference, not a vendor statement

acer-aspire-1602m (same device)

Aspire 7600U Firmware · Acer

95%

v < p11.a4

Affected range stops below p11.a4, so it looks safe — our inference, not a vendor statement

acer-aspire-7600u (same device)

Aspire MC605 Firmware · Acer

95%

v < p11.a4l

Affected range stops below p11.a4l, so it looks safe — our inference, not a vendor statement

acer-aspire-mc605 (same device)

Aspire Tc 105 Firmware · Acer

95%

v < p12.b0l

Affected range stops below p12.b0l, so it looks safe — our inference, not a vendor statement

acer-aspire-tc-105 (same device)

Aspire Tc 120 Firmware · Acer

95%

v < p11-a4

Affected range stops below p11-a4, so it looks safe — our inference, not a vendor statement

acer-aspire-tc-120 (same device)

Aspire U5-620 Firmware · Acer

95%

v < p11.a1

Affected range stops below p11.a1, so it looks safe — our inference, not a vendor statement

acer-aspire-u5-620 (same device)

Aspire X1935 Firmware · Acer

95%

v < p11.a3l

Affected range stops below p11.a3l, so it looks safe — our inference, not a vendor statement

acer-aspire-x1935 (same device)

Remediation

No guide yet

No remediation guidance has been written for this CVE yet, and no fixed version or vendor advisory is recorded against it.

References (3)

Source: [email protected]

http://acer.com

Source: [email protected]

http://altos.com

ExploitThird Party Advisory

Source: [email protected]

https://github.com/10TG/vulnerabilities/blob/main/Acer/CVE-2022-30426/CVE-2022-30426.md

SSVC — Action Prioritization

SSVCPoCNot automatableTotal impact

SSVC signals action urgency (what to patch first), separate from CVSS which measures severity.

CVSS

7.8HIGHCISA-ADP

Attack Vector: LOCAL
Complexity: LOW
Privileges: LOW
User Interaction: NONE
Scope: UNCHANGED
Confidentiality: HIGH
Integrity: HIGH
Availability: HIGH

Vector?

Quick Info

StatusMODIFIED

CWE

CWE-787

Get alerted

Stop reading CVE feeds looking for your own stack

Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.

Create account Sign in

Free plan, no card