CVE-2022-32295: Critical severity ampere computing ampere altra firmware vulnerability
Published Jun 30, 2022
·Updated
On Ampere Altra and AltraMax devices before SRP 1.09, the Altra reference design of UEFI accesses allows insecure access to SPI-NOR by the OS/hypervisor component.
Affected Software
4 affected components
Amperecomputing Ampere Altra Firmware<1.09
Amperecomputing Ampere Altra
Amperecomputing Ampere Altra Max Firmware<1.09
Amperecomputing Ampere Altra Max
Event History
Jun 30, 2022
CVE Published
via MITRE·11:28 PM
Data Sourced
via MITRE·11:28 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2022-32295?
The severity of CVE-2022-32295 is critical.
2
Which devices are affected by CVE-2022-32295?
Ampere Altra and AltraMax devices before SRP 1.09 are affected by CVE-2022-32295.
3
What is the vulnerability in CVE-2022-32295?
The vulnerability in CVE-2022-32295 allows insecure access to SPI-NOR by the OS/hypervisor component on Ampere Altra and AltraMax devices before SRP 1.09.
4
How can I fix CVE-2022-32295?
Click on the link to the Ampere Computing website for information on the Altra SPI-NOR SMC protection update.
5
Where can I find more information about CVE-2022-32295?
You can find more information about CVE-2022-32295 on the Ampere Computing website and the security bulletins section.