← Database

CVE-2022-35888

MEDIUM CVSS: 6.5 Published: 2022-09-29 Modified: 2026-06-17

Description

Ampere Altra and Ampere Altra Max devices through 2022-07-15 allow attacks via Hertzbleed, which is a power side-channel attack that extracts secret information from the CPU by correlating the power consumption with data being processed on the system.

Affected Platforms

Amperecomputing Ampere Altra FirmwareAmperecomputing Ampereone FirmwareAmperecomputing Ampere Altra Max FirmwareAmperecomputing Ampere Altra MaxAmperecomputing AmpereoneAmperecomputing Ampere Altra

Weakness Type

CWE-203, CWE-203

References