K14335949 : Intel processors vulnerability CVE-2022-24436

Security Advisory Description

Observable behavioral in power management throttling for some Intel® Processors may allow an authenticated user to potentially enable information disclosure via network access. (CVE-2022-24436 also known as hertzbleed)

Impact

Successful exploitation of this vulnerability could lead to disclosure of sensitive information.

This hardware issue impacts all of the following F5 platforms using Intel processors. For information about hertzbleed and AMD processor platforms, refer to K43357358: AMD processors vulnerability CVE-2022-23823:

• BIG-IP 800 (C114)

• BIG-IP 2000/2200s (C112)

• BIG-IP 4000s - 4200s (C113)

• BIG-IP 5000s - 5250v (C109)

• BIG-IP 7000s - 7250v (D110)

• BIG-IP 10000s - 10055s / BIG-IP 10250v - 10255v (D113)

• BIG-IP 11050 (E102)

• VIPRION

  • C2200 Chassis (D114)
  • C2400 Chassis (F100)
  • C4480 Chassis (J102)
  • C4800 Chassis (S100)
  • B2100 Blade (A109)
  • B2150 Blade (A113)
  • B2250 Blade (A112)
  • B4300 Blade (A108)
  • B4345N Blade (A110)
  • B4400 Blade (A114)

• iSeries

  • i2600 (C117)
  • Herculon i2800 (C120)
  • i4600 (C115)
  • i5600 (C119)
  • Herculon i5800 (C121)
  • i5820-DF (C125)
  • i7600 (C118)
  • i7820-DF (C126)
  • i10600 (C116)
  • Herculon i10800 (C122)
  • i11400 (C123)
  • I11800-DS (C124)
  • i12600 (C117)
  • i15600 (D116)

• VELOS

  • CX410 Chassis (F101)
  • BX110 Blade (A118)

• rSeries

  • r2800 (C130)
  • r4800 (C131)
  • r5900 (C129)
  • r10900 (C128)