Review reviewHigh

CVE-2022-30426

altos t110 f3 firmware, altos t110 f3

There is a stack buffer overflow vulnerability, which could lead to arbitrary code execution in UEFI DXE driver on some Acer products. An attack could exploit this vulnerability to escalate privilege from ring 3 to ring 0, and hijack control flow during UEFI DXE execution. This affects Altos T110 F3 firmware version <= P13 (latest) and AP130 F2 firmware version <= P04 (latest) and Aspire 1600X firmware version <= P11.A3L (latest) and Aspire 1602M firmware version <= P11.A3L (latest) and Aspire 7600U firmware version <= P11.A4 (latest) and Aspire MC605 firmware version <= P11.A4L (latest) an...

CVSS: 7.8
EPSS: 0.35%
CISA KEV: Not listed
Published: 2022.09.23

PRIORITY ASSESSMENT

Review review

The CVSS severity warrants an early asset and exposure review.

Known exploitationNot established by KEV

Exploit probability0.35%

Technical severityCVSS 7.8

Vulnerability overview

Affected product and versions

Product: altos t110 f3 firmware, altos t110 f3
Affected versions: < p13, < p04, < p11.a3l, < p11.a4, < p11.a4l, < p12.b0l, < p11-a4, < p11.a1, < p11.b3, < p11.a2l, < aap02sr, < p21.a1, < p21.a3, < p11-a3, < p11-b0l, < p11.b0, < p21.a0, < p21.b0, < p11.a3
Fixed versions: p13, p04, p11.a3l, p11.a4, p11.a4l, p12.b0l, p11-a4, p11.a1, p11.b3, p11.a2l, aap02sr, p21.a1, p21.a3, p11-a3, p11-b0l, p11.b0, p21.a0, p21.b0, p11.a3

Recommended response sequence

Confirm exposure before applying a vendor-supported change.

Full remediation guide

1
Identify
Confirm that altos t110 f3 firmware, altos t110 f3 and an affected version are present.
2
Prioritize
Combine exploitation signals with asset exposure and business criticality.
3
Remediate
Follow the vendor advisory or supported update path and preserve rollback options.
4
Verify
Recheck the version, service health, access paths, and relevant logs.

Technical data

CVSS vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CWE: CWE-787