CVE-2022-35888 PUBLISHED CVSS 6.5 MEDIUM

Ampere Altra and Ampere Altra Max devices through 2022-07-15 allow attacks via Hertzbleed, which is a power side-channel attack that extracts secret information from the CPU by correlating the power consumption with data being processed on the system.

EPSS 0.40% · 60.5th percentile

Risk Scores

CVSS v3.1
6.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
EPSS Score
0.40%
60.5th percentile

Affected Products

VendorProductVersions
amperecomputingampere_altra_max_firmware0
amperecomputingampereone_firmware0
n/an/an/a
amperecomputingampere_altra_firmware0

Timeline

References

Open in Interactive Console →