Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

9 records

Priority MEDIUM 49

Ampere AmpereOne AC03 devices before 3.5.9.3, AmpereOne AC04 devices before 4.4.5.2, and AmpereOne M devices before 5.4.5.1 allow an incorrectly formed SMC call to UEFI-MM MMCommunicate service that could result in an ou…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00365 Published 2025-12-16 No fix listed CWE-787
Priority MEDIUM 49

Ampere AmpereOne AC03 devices before 3.5.9.3, AmpereOne AC04 devices before 4.4.5.2, and AmpereOne M devices before 5.4.5.1 allow an incorrectly formed SMC call to UEFI-MM PCIe driver that could result in an out-of-bound…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00365 Published 2025-12-16 No fix listed CWE-787
Priority LOW 20

Ampere AmpereOne AC03 devices before 3.5.9.3, AmpereOne AC04 devices before 4.4.5.2, and AmpereOne M devices before 5.4.5.1 allow an incorrectly formed SMC call to UEFI-MM Boot Error Record Table driver that could result…

CVSS 3.1MEDIUM 4.6 Local High privileges No interaction EPSS 0.00125 Published 2025-12-16 No fix listed CWE-125
Priority LOW 30

Ampere Altra and Ampere Altra Max devices through 2022-07-15 allow attacks via Hertzbleed, which is a power side-channel attack that extracts secret information from the CPU by correlating the power consumption with data…

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.00713 Published 2022-09-29 No fix listed CWE-203
Priority LOW 33

Ampere Altra devices before 1.08g and Ampere Altra Max devices before 2.05a allow attackers to control the predictions for return addresses and potentially hijack code flow to execute arbitrary code via a side-channel at…

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00224 Published 2022-08-17 No fix listed CWE-203