CVE-2022-32295

2022-06-3023:28:16

mitre

www.cve.org

9.6 High

AI Score

Confidence

High

0.003 Low

EPSS

Percentile

71.1%

JSON

On Ampere Altra and AltraMax devices before SRP 1.09, the Altra reference design of UEFI accesses allows insecure access to SPI-NOR by the OS/hypervisor component.

References

amperecomputing.com

amperecomputing.com/products/security-bulletins/altra-spi-nor-smc-protection-for-ampere-website.html

amperecomputing.com/products/security-bulletins/altra-spi-nor-smc.html