Stack Overflow Vulnerability in Acer Altos Servers
CVE-2022-41415

9.8CRITICAL

Key Information:

Vendor

Acer

Status
Altos W2000h-w570h F4 Firmware
Vendor
CVE Published:
19 October 2022

What is CVE-2022-41415?

A critical stack overflow vulnerability exists within the RevserveMem component of Acer Altos W2000h-W570h F4 R01.03.0018. This flaw can be exploited by attackers who inject specially crafted shellcode into the NVRAM variable, potentially resulting in a Denial of Service (DoS) condition. It is essential for users to apply necessary updates and patches to mitigate the risk posed by this vulnerability.

References

http://acer.com
http://altos.com
https://github.com/10TG/vulnerabilities/blob/main/Acer/CV...

CVSS V3.1

Score:
9.8
Severity:
CRITICAL
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.
CVE-2022-41415 : Stack Overflow Vulnerability in Acer Altos Servers