CVE-2022-35888

No fix known EPSS <1%CVSS 6.5

Ampere Altra and Ampere Altra Max devices through 2022-07-15 allow attacks via Hertzbleed, which is a power side-channel attack that extracts secret information from the CPU by correlating the power consumption with data being processed on the system.

Published 2022-09-29 · CVE record · OSV

Products: amperecomputing ampere_altra_max_firmware, amperecomputing ampere_altra_firmware, amperecomputing ampereone_firmware