HIGH🇵🇱 Wersja polska

CVE-2022-48251

CVSS 7.5v3.1pub. 2023-01-10upd. 2024-11-21

The AES instructions on the ARMv8 platform do not have an algorithm that is "intrinsically resistant" to side-channel attacks. NOTE: the vendor reportedly offers the position "while power side channel attacks ... are possible, they are not directly caused by or related to the Arm architecture."

CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

  • Arm Cortex A53

    HW
    Arm
    all versions

  • Arm Cortex A53 Firmware

    OS
    Arm
    all versions

  • Arm Cortex A55

    HW
    Arm
    all versions

  • Arm Cortex A55 Firmware

    OS
    Arm
    all versions

  • Arm Cortex A57

    HW
    Arm
    all versions

  • Arm Cortex A57 Firmware

    OS
    Arm
    all versions

  • Arm Cortex A72

    HW
    Arm
    all versions

  • Arm Cortex A72 Firmware

    OS
    Arm
    all versions

  • Arm Cortex A73

    HW
    Arm
    all versions

  • Arm Cortex A73 Firmware

    OS
    Arm
    all versions

  • Arm Cortex A75

    HW
    Arm
    all versions

  • Arm Cortex A75 Firmware

    OS
    Arm
    all versions

  • Arm Cortex A76

    HW
    Arm
    all versions

  • Arm Cortex A76ae

    HW
    Arm
    all versions

  • Arm Cortex A76ae Firmware

    OS
    Arm
    all versions

  • Arm Cortex A76 Firmware

    OS
    Arm
    all versions

  • Arm Cortex A77

    HW
    Arm
    all versions

  • Arm Cortex A77 Firmware

    OS
    Arm
    all versions

  • Arm Cortex A78

    HW
    Arm
    all versions

  • Arm Cortex A78 Firmware

    OS
    Arm
    all versions
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
CWE
References

Related vulnerabilities

CVE-2024-5660CRITICAL9.8PL ✓same product

Arm Cortex/Neoverse: obejście ochrony Stage-2 przez Hardware Page Aggregation

CVE-2024-10929MEDIUM5.1same product

In certain circumstances, an issue in Arm Cortex-A57, Cortex-A72 (revisions before r1p0), Cortex-A73 and Corte...

CVE-2023-34320MEDIUM5.5same product

Cortex-A77 cores (r0p0 and r1p0) are affected by erratum 1508412 where software, under certain circumstances, ...

CVE-2022-23960MEDIUM5.6same product

Certain Arm Cortex and Neoverse processors through 2022-03-08 do not properly restrict cache speculation, aka ...

CVE-2022-25368MEDIUM4.7same product

Spectre BHB is a variant of Spectre-v2 in which malicious code uses the shared branch history (stored in the C...