CVE-2022-41415

CriticalCVSS 9.8

Published: 19/10/2022(UTC)Updated: 09/07/2026(UTC)Translated: 10/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Elevated risk

0.93%

56th percentile - higher than 56% of all known CVEs

Summary

A stack overflow vulnerability was discovered in the RevserveMem component of Acer Altos W2000h-W570h F4 R01.03.0018. This flaw allows attackers to cause a Denial of Service (DoS) by injecting crafted shellcode into the NVRAM variable.

Risk Assessment

An attacker can remotely crash the system, leading to service disruption and potential loss of availability.

Recommendation

Immediately update the firmware to the latest version provided by the vendor and restrict access to NVRAM management interfaces.

Original NVD description (English source)

Acer Altos W2000h-W570h F4 R01.03.0018 was discovered to contain a stack overflow in the RevserveMem component. This vulnerability allows attackers to cause a Denial of Service (DoS) via injecting crafted shellcode into the NVRAM variable.