Home Embedded Vulns General Vulns

CVE-2022-32295

CRITICAL 9.8

Our Analysis: Environment Specific

Our model has classified this vulnerability as relevant to Environment Specific Systems, helping your team prioritize efforts effectively.

Published Date July 1, 2022
Last Modified November 21, 2024
CVSS Vector Not Available

Description

On Ampere Altra and AltraMax devices before SRP 1.09, the Altra reference design of UEFI accesses allows insecure access to SPI-NOR by the OS/hypervisor component.

Potentially Affected Vendors