CVE-2022-35888 - Ampere Altra and Ampere Altra Max devices through 2022-07-15 allow attacks via Hertzbleed, which is a power side-channel attack that extracts secret information from the CPU by correlating the power consumption with data being processed on the system

Back Back to CVE browser

MEDIUM

Ampere Altra and Ampere Altra Max devices through 2022-07-15 allow attacks via Hertzbleed, which is a power side-channel attack that extracts secret information from the CPU by correlating the power consumption with data being processed on the system

Published Sep 29, 2022

6.5

MEDIUM

CVSS 3.1

EPSS 0.70%

Description

Ampere Altra and Ampere Altra Max devices through 2022-07-15 allow attacks via Hertzbleed, which is a power side-channel attack that extracts secret information from the CPU by correlating the power consumption with data being processed on the system.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-203

References (3)

https://amperecomputing.com/products/security-bulletins/hertzbleed.html
x_refsource_MISCVendor Advisory
https://developer.arm.com/documentation/ka005111/1-0/?lang=en
x_refsource_MISCTechnical DescriptionThird Party Advisory
https://euvd.enisa.europa.eu/vulnerability/EUVD-2022-38761
Advisory

Link	Providers	Tags
https://amperecomputing.com/products/security-bulletins/hertzbleed.html		x_refsource_MISCVendor Advisory
https://developer.arm.com/documentation/ka005111/1-0/?lang=en		x_refsource_MISCTechnical DescriptionThird Party Advisory
https://euvd.enisa.europa.eu/vulnerability/EUVD-2022-38761		Advisory