Lucene search

K
nvd[email protected]NVD:CVE-2021-45454
HistoryAug 17, 2022 - 1:15 p.m.

CVE-2021-45454

2022-08-1713:15:08
web.nvd.nist.gov
ampere altra
altra max
information disclosure
power telemetry
hwmon

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

0.003 Low

EPSS

Percentile

65.5%

Ampere Altra before SRP 1.08b and Altra Max​ before SRP 2.05 allow information disclosure of power telemetry via HWmon.

Affected configurations

NVD
Node
amperecomputingampere_altra_firmwareRange<1.08b
AND
amperecomputingampere_altraMatch-
Node
amperecomputingampere_altra_max_firmwareRange<2.05
AND
amperecomputingampere_altra_maxMatch-

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

0.003 Low

EPSS

Percentile

65.5%

Related for NVD:CVE-2021-45454