Unscored CVE-2022-32295 EUVD-2022-53488GHSA-r3jc-hf4v-62fg

On Ampere Altra and AltraMax devices before SRP 1.09, the Altra reference design of UEFI accesses allows insecure access to SPI-NOR by the …

Published Jun 30, 2022 · Updated Aug 3, 2024 · Assigned by mitre

Description

On Ampere Altra and AltraMax devices before SRP 1.09, the Altra reference design of UEFI accesses allows insecure access to SPI-NOR by the OS/hypervisor component.

References

https://amperecomputing.com
https://amperecomputing.com/products/security-bulletins/altra-spi-nor-smc-protection-for-ampere-website.html
https://amperecomputing.com/products/security-bulletins/altra-spi-nor-smc.html