CVE-2022-35888

Ampere Altra and Ampere Altra Max devices through 2022-07-15 allow attacks via Hertzbleed, which is a power side-channel attack that extracts secret information from the CPU by correlating the power consumption with data being processed on the system.

Score

CVSS 3.1 6.5 Medium

Status

Modified - cve@mitre.org

Published

2022-09-29

Last modified

2025-05-20

Weaknesses

CWE-203

Affected products

• Ampere Altra Firmware (Amperecomputing)
• Ampere Altra Max Firmware (Amperecomputing)
• Ampereone Firmware (Amperecomputing)

References

• https://amperecomputing.com/products/security-bulletins/hertzbleed.html
• https://developer.arm.com/documentation/ka005111/1-0/?lang=en