Tech New Flaw in Acer Laptops Could Let Attackers Disable Secure Boot Protection - GoFuckYourself.com

TheLegacy · 11-30-2022, 06:31 AM

So if anyone just bought a new Acer - keep an eye out for this.

Acer has released a firmware update to address a security vulnerability that could be potentially weaponized to turn off UEFI Secure Boot on affected machines.

Tracked as CVE-2022-4020, the high-severity vulnerability affects five different models that consist of Aspire A315-22, A115-21, and A315-22G, and Extensa EX215-21 and EX215-21G.

The PC maker described the vulnerability as an issue that "may allow changes to Secure Boot settings by creating NVRAM variables." Credited with discovering the flaw is ESET researcher Martin Smolár, who previously disclosed similar bugs in Lenovo computers.

Disabling Secure Boot, an integrity mechanism that guarantees that only trusted software is loaded during system startup, enables a malicious actor to tamper with boot loaders, leading to severe consequences.

This includes granting the attacker complete control over the operating system loading process as well as "disable or bypass protections to silently deploy their own payloads with the system privileges."

https://thehackernews.com/2022/11/ne...could-let.html

$5 submissions · 12-18-2022, 04:49 PM

Thank goodness I went with an Asus instead

Great gaming laptops!

Jesus H Christ 2.0 · 12-19-2022, 03:22 AM

Thanks for the heads up!

NatalieK · 12-22-2022, 03:34 PM

We´ve had so many acer, lucky the ones in your list above seem like entry level, so not effecting us. But thank you for the info

11-30-2022, 06:31 AM	#1
TheLegacy I'm Bi-sexy Industry Role: Join Date: Apr 2003 Location: Brantford, Ontario Posts: 14,540	New Flaw in Acer Laptops Could Let Attackers Disable Secure Boot Protection So if anyone just bought a new Acer - keep an eye out for this. Acer has released a firmware update to address a security vulnerability that could be potentially weaponized to turn off UEFI Secure Boot on affected machines. Tracked as CVE-2022-4020, the high-severity vulnerability affects five different models that consist of Aspire A315-22, A115-21, and A315-22G, and Extensa EX215-21 and EX215-21G. The PC maker described the vulnerability as an issue that "may allow changes to Secure Boot settings by creating NVRAM variables." Credited with discovering the flaw is ESET researcher Martin Smolár, who previously disclosed similar bugs in Lenovo computers. Disabling Secure Boot, an integrity mechanism that guarantees that only trusted software is loaded during system startup, enables a malicious actor to tamper with boot loaders, leading to severe consequences. This includes granting the attacker complete control over the operating system loading process as well as "disable or bypass protections to silently deploy their own payloads with the system privileges." https://thehackernews.com/2022/11/ne...could-let.html __________________ Robert "TheLegacy" Warren Skype: robjameswarren RobertWarrenSEO.com

12-18-2022, 04:49 PM	#2
$5 submissions I help you SUCCEED Industry Role: Join Date: Nov 2003 Location: The Pearl of the Orient Seas Posts: 32,138	Thank goodness I went with an Asus instead Great gaming laptops! __________________ Need To Backup Your ADULT Income? Let me build your YOUTUBE CHANNEL for dirt cheap! For Hire: $3/hour or $400 per month Marketing Specialist Virtual Assistants

12-22-2022, 03:34 PM	#4
NatalieK Natalie K Industry Role: Join Date: Apr 2010 Location: Spain Posts: 18,560	We´ve had so many acer, lucky the ones in your list above seem like entry level, so not effecting us. But thank you for the info __________________ My official site NatalieK.xxx My free porn & affiliate blog Natalie K affiliate program First time girls Skype: gspotproductions - "Converting your traffic into income since 2005"

12-19-2022, 03:22 AM	#3
Jesus H Christ 2.0 So Fucking Banned Industry Role: Join Date: Dec 2021 Location: Jerusalem Posts: 150	Thanks for the heads up!