Design/Logic Flaw

2022-07-0100:15:00

PRIOn knowledge base

www.prio-n.com

9.3 High

AI Score

Confidence

High

0.003 Low

EPSS

Percentile

71.2%

JSON

On Ampere Altra and AltraMax devices before SRP 1.09, the Altra reference design of UEFI accesses allows insecure access to SPI-NOR by the OS/hypervisor component.

CPENameOperatorVersion
ampere_altra_firmwarelt1.09
ampere_altra_max_firmwarelt1.09

CPE	Name	Operator	Version
	ampere_altra_firmware	lt	1.09
	ampere_altra_max_firmware	lt	1.09

References

amperecomputing.com

amperecomputing.com/products/security-bulletins/altra-spi-nor-smc-protection-for-ampere-website.html

amperecomputing.com/products/security-bulletins/altra-spi-nor-smc.html