AA
Product
Ampere Altra Firmware
6
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 2High 2Medium 2Low 0
Watch
Add Ampere Altra Firmware to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2022-46892 | 9.8 | Feb 15 | In Ampere AltraMax and Ampere Altra before 2.10c, improper access controls allows the OS to reinitialize a disabled root complex Affected: before 2.10c |
| CVE-2022-32295 | 9.8 | Jul 1 | On Ampere Altra and AltraMax devices before SRP 1.09, the Altra reference design of UEFI accesses allows insecure access to SPI-NOR by the OS/hypervisor component Affected: before 1.09 |
| CVE-2022-37459 | 7.8 | Aug 17 | Ampere Altra devices before 1.08g and Ampere Altra Max devices before 2.05a allow attackers to control the predictions for return addresses and potentially hijack code flow to… Affected: before 1.08g |
| CVE-2021-45454 | 7.5 | Aug 17 | Ampere Altra before SRP 1.08b and Altra Max before SRP 2.05 allow information disclosure of power telemetry via HWmon Affected: before 1.08b |
| CVE-2022-35888 | 6.5 | Sep 29 | Ampere Altra and Ampere Altra Max devices through 2022-07-15 allow attacks via Hertzbleed, which is a power side-channel attack that extracts secret information from the CPU by… Affected: through 2022-07-15 |
| CVE-2022-25368 | 4.7 | Mar 10 | Spectre BHB is a variant of Spectre-v2 in which malicious code uses the shared branch history (stored in the CPU BHB) to influence mispredicted branches in the victim's hardware… Affected: All versions, or not specified |
Showing 6