Out-of-bounds write in Acer Altos T110 F3 Firmware
CVSS score
7.8
EPSS probability
%0.4
Risk score
0.0
Published
4 y ago
Resmî kaynaklarda yeterli kanıt bulunamadı. Bu sonuç “yama yok” anlamına gelmez.
Impact on My Inventory
Only the personal products you have added to your account are assessed; an organisation's inventory does not appear here.
Checking session…
Vulnerability description
DayBreach CVE AI Research
CVE-2022-30426 has vendor, distribution, patch and security-source records on file. We can compare them and prepare an explanation linked to the evidence.
There is a stack buffer overflow vulnerability, which could lead to arbitrary code execution in UEFI DXE driver on some Acer products. An attack could exploit this vulnerability to escalate privilege from ring 3 to ring 0, and hijack control flow during UEFI DXE execution. This affects Altos T110 F3 firmware version <= P13 (latest) and AP130 F2 firmware version <= P04 (latest) and Aspire 1600X firmware version <= P11.A3L (latest) and Aspire 1602M firmware version <= P11.A3L (latest) and Aspire 7600U firmware version <= P11.A4 (latest) and Aspire MC605 firmware version <= P11.A4L (latest) and Aspire TC-105 firmware version <= P12.B0L (latest) and Aspire TC-120 firmware version <= P11-A4 (latest) and Aspire U5-620 firmware version <= P11.A1 (latest) and Aspire X1935 firmware version <= P11.A3L (latest) and Aspire X3475 firmware version <= P11.A3L (latest) and Aspire X3995 firmware version <= P11.A3L (latest) and Aspire XC100 firmware version <= P11.B3 (latest) and Aspire XC600 firmware version <= P11.A4 (latest) and Aspire Z3-615 firmware version <= P11.A2L (latest) and Veriton E430G firmware version <= P21.A1 (latest) and Veriton B630_49 firmware version <= AAP02SR (latest) and Veriton E430 firmware version <= P11.A4 (latest) and Veriton M2110G firmware version <= P21.A3 (latest) and Veriton M2120G fir.
IMPACT: Affected Products and Software
Affected Products
The following products are affected by CVE-2022-30426 vulnerability. Where our threat engine knows the exact affected versions, they are listed below.
| ID | VENDOR | PRODUCT | ACTION |
|---|---|---|---|
| 1 | acer | altos t110 f3 firmware | View |
| 2 | acer | altos t110 f3 | View |
| 3 | acer | ap130 f2 firmware | View |
| 4 | acer | ap130 f2 | View |
| 5 | acer | aspire 1600x firmware | View |
| 6 | acer | aspire 1600x | View |
| 7 | acer | aspire 1602m firmware | View |
| 8 | acer | aspire 1602m | View |
| 9 | acer | aspire 7600u firmware | View |
| 10 | acer | aspire 7600u | View |
| 11 | acer | aspire mc605 firmware | View |
| 12 | acer | aspire mc605 | View |
| 13 | acer | aspire tc-105 firmware | View |
| 14 | acer | aspire tc-105 | View |
| 15 | acer | aspire tc-120 firmware | View |
| 16 | acer | aspire tc-120 | View |
| 17 | acer | aspire u5-620 firmware | View |
| 18 | acer | aspire u5-620 | View |
| 19 | acer | aspire x1935 firmware | View |
| 20 | acer | aspire x1935 | View |
| 21 | acer | aspire x3475 firmware | View |
| 22 | acer | aspire x3475 | View |
| 23 | acer | aspire x3995 firmware | View |
| 24 | acer | aspire x3995 | View |
| 25 | acer | aspire xc100 firmware | View |
| 26 | acer | aspire xc100 | View |
| 27 | acer | aspire xc600 firmware | View |
| 28 | acer | aspire xc600 | View |
| 29 | acer | aspire z3-615 firmware | View |
| 30 | acer | aspire z3-615 | View |
| 31 | acer | veriton b630 49 firmware | View |
| 32 | acer | veriton b630 49 | View |
| 33 | acer | veriton e430g firmware | View |
| 34 | acer | veriton e430g | View |
| 35 | acer | veriton e430 firmware | View |
| 36 | acer | veriton e430 | View |
| 37 | acer | veriton m2110g firmware | View |
| 38 | acer | veriton m2110g | View |
| 39 | acer | veriton m2120g firmware | View |
| 40 | acer | veriton m2120g | View |
| 41 | acer | veriton m2611g firmware | View |
| 42 | acer | veriton m2611g | View |
| 43 | acer | veriton m2611 firmware | View |
| 44 | acer | veriton m2611 | View |
| 45 | acer | veriton m4620 firmware | View |
| 46 | acer | veriton m4620 | View |
| 47 | acer | veriton m4620g firmware | View |
| 48 | acer | veriton m4620g | View |
| 49 | acer | veriton m6620g firmware | View |
| 50 | acer | veriton m6620g | View |
| 51 | acer | veriton n2620g firmware | View |
| 52 | acer | veriton n2620g | View |
| 53 | acer | veriton n4620g firmware | View |
| 54 | acer | veriton n4620g | View |
| 55 | acer | veriton n4630g firmware | View |
| 56 | acer | veriton n4630g | View |
| 57 | acer | veriton s6620g firmware | View |
| 58 | acer | veriton s6620g | View |
| 59 | acer | veriton x2611g firmware | View |
| 60 | acer | veriton x2611g | View |
| 61 | acer | veriton x2611 firmware | View |
| 62 | acer | veriton x2611 | View |
| 63 | acer | veriton x4620g firmware | View |
| 64 | acer | veriton x4620g | View |
| 65 | acer | veriton x6620g firmware | View |
| 66 | acer | veriton x6620g | View |
| 67 | acer | veriton z2650g firmware | View |
| 68 | acer | veriton z2650g | View |
RED HAT CSAF/VEX: Product Impact Check
SCORING: CVSS from Multiple Sources
CVSS Scores
The Common Vulnerability Scoring System is a standardised framework for assessing the severity of vulnerabilities in software and systems. We collect and display CVSS scores from several sources for each CVE.
| SCORE | VERSION | SEVERITY | VECTOR | SOURCE |
|---|---|---|---|---|
| 7.8 | CVSS V31 | HIGH | CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H | NVD |
Patch and Remediation Guide
Solution & Remediation Advisory
İncelenen resmî kaynaklarda yama durumu doğrulanamadı. Bu sonuç “yama yok” anlamına gelmez.
Public exploit and active exploitation status
Verified exploit intelligence
CVE-2022-30426 : the database holds 1 public PoC/exploit sources for it. For direct links to the sources, open the Public Exploits tab.
Weakness Classification and Attack Patterns (CWE & CAPEC)
CWE - Common Weakness Enumeration
While CVE identifies specific instances of vulnerabilities, CWE categorises the common flaws or weaknesses that can lead to vulnerabilities. CVE-2022-30426 is associated with the following CWEs:
Common Attack Pattern Enumeration and Classification (CAPEC)
Common Attack Pattern Enumeration and Classification (CAPEC) stores attack patterns, which are descriptions of the common attributes and approaches employed by adversaries to exploit the CVE-2022-30426 weaknesses.
Attack Vector and Accessibility
Similar Vulnerabilities
Get this vulnerability through the API
Affected products, version ranges, exploitation status and patch information in a single request, with a free key.
curl -H "x-api-key: $DAYBREACH_API_KEY" \ "https://api.daybreach.dev/api/v1/intel/cves/CVE-2022-30426"