Design/Logic Flaw

2022-09-2901:15:00

PRIOn knowledge base

www.prio-n.com

6.4 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

50.8%

JSON

Ampere Altra and Ampere Altra Max devices through 2022-07-15 allow attacks via Hertzbleed, which is a power side-channel attack that extracts secret information from the CPU by correlating the power consumption with data being processed on the system.

CPENameOperatorVersion
ampere_altra_firmwareeq<= 2022715
ampere_altra_max_firmwareeq<= 2022715
ampereone_firmwareeq<= 2022715

Name	Operator	Version
ampere_altra_firmware	eq	<= 2022715
ampere_altra_max_firmware	eq	<= 2022715
ampereone_firmware	eq	<= 2022715

References

amperecomputing.com/products/security-bulletins/hertzbleed.html

developer.arm.com/documentation/ka005111/1-0/?lang=en