Vulnerabilities > Amperecomputing > Ampere Altra Firmware > Medium

DATE CVE VULNERABILITY TITLE RISK
2022-09-29 CVE-2022-35888 Information Exposure Through Discrepancy vulnerability in Amperecomputing products
Ampere Altra and Ampere Altra Max devices through 2022-07-15 allow attacks via Hertzbleed, which is a power side-channel attack that extracts secret information from the CPU by correlating the power consumption with data being processed on the system.
network
low complexity
amperecomputing CWE-203
6.5
2022-03-10 CVE-2022-25368 Spectre BHB is a variant of Spectre-v2 in which malicious code uses the shared branch history (stored in the CPU BHB) to influence mispredicted branches in the victim's hardware context.
local
high complexity
amperecomputing arm
4.7