Vulnerabilities > CVE-2022-35888 - Information Exposure Through Discrepancy vulnerability in Amperecomputing products

047910
CVSS 6.5 - MEDIUM
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
HIGH
Integrity impact
NONE
Availability impact
NONE
network
low complexity
amperecomputing
CWE-203

Summary

Ampere Altra and Ampere Altra Max devices through 2022-07-15 allow attacks via Hertzbleed, which is a power side-channel attack that extracts secret information from the CPU by correlating the power consumption with data being processed on the system.

Common Weakness Enumeration (CWE)