Vulnerability index

Browse CVEs

7 matching
Filters 1 Clear all
Severity

Filters apply as you choose them.

Ampereone A192 32m Firmware CRITICAL 9.8
CVE-2025-62863

Ampere AmpereOne AC03 devices before 3.5.9.3, AmpereOne AC04 devices before 4.4.5.2, and AmpereOne M devices before 5.4.5.1 allow an incorrectly form…

Fix: 4.4.5.2 / 5.4.5.1+
Fix from $2,300 2025-12-16
Ampereone A192 32m Firmware CRITICAL 9.8
CVE-2025-62864

Ampere AmpereOne AC03 devices before 3.5.9.3, AmpereOne AC04 devices before 4.4.5.2, and AmpereOne M devices before 5.4.5.1 allow an incorrectly form…

Fix: 4.4.5.2 / 5.4.5.1+
Fix from $2,300 2025-12-16
Ampere Altra Firmware CRITICAL 9.8
CVE-2022-46892

In Ampere AltraMax and Ampere Altra before 2.10c, improper access controls allows the OS to reinitialize a disabled root complex.

Fix: 2.10c+
Fix from $2,300 2023-02-15
Ampere Altra Max Firmware MEDIUM 6.5
CVE-2022-35888

Ampere Altra and Ampere Altra Max devices through 2022-07-15 allow attacks via Hertzbleed, which is a power side-channel attack that extracts secret …

Fix: after 2022-07-15
Fix from $1,600 2022-09-29
Ampere Altra Firmware HIGH 7.8
CVE-2022-37459

Ampere Altra devices before 1.08g and Ampere Altra Max devices before 2.05a allow attackers to control the predictions for return addresses and poten…

Fix: 1.08g / 2.05a+
Fix from $1,950 2022-08-17
Ampere Altra Firmware HIGH 7.5
CVE-2021-45454

Ampere Altra before SRP 1.08b and Altra Max​ before SRP 2.05 allow information disclosure of power telemetry via HWmon.

Fix: 1.08b / 2.05+
Fix from $1,950 2022-08-17
Ampere Altra Firmware CRITICAL 9.8
CVE-2022-32295

On Ampere Altra and AltraMax devices before SRP 1.09, the Altra reference design of UEFI accesses allows insecure access to SPI-NOR by the OS/hypervi…

Fix: 1.09+
Fix from $2,300 2022-07-01