CVE-2022-46892

In Ampere AltraMax and Ampere Altra before 2.10c, improper access controls allows the OS to reinitialize a disabled root complex.

Score

CVSS 3.1 9.8 Critical

Status

Modified - cve@mitre.org

Published

2023-02-15

Last modified

2025-03-19

Weaknesses

CWE-284

Affected products

• Ampere Altra Firmware (Amperecomputing)
• Ampere Altra Max Firmware (Amperecomputing)

References

• https://amperecomputing.com/products/security-bulletins/root-complex-OS-re-enable