DeutschShown in its original language — a full translation is planned for a future version.
Prozessoren: Schwachstelle ermöglicht Offenlegung von Informationen und Umgehung von Kryptografie
view advisory published 2022-06-14
Ein entfernter, authentisierter Angreifer kann mehrere Schwachstellen in AMD und Intel Prozessoren ausnutzen, um Informationen offenzulegen und dadurch kryptografische Sicherheitsvorkehrungen zu umgehen.
01
describes (2)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2022-24436US | medium6.5 | — | ||
Observable behavioral in power management throttling for some Intel(R) Processors may allow an authenticated user to potentially enable information disclosure via network access. | ||||
| CVE-2022-23823US | medium6.5 | — | ||
A potential vulnerability in some AMD processors using frequency scaling may allow an authenticated attacker to execute a timing attack to potentially enable information disclosure… | ||||
02
references
External citations — patches, advisories, analysis.
- Hertzbleed PoCexternal
- F5 Security Advisory K14335949 vom 2025-02-06external
- F5 Security Advisory K43357358 vom 2025-02-06external
- Lenovo Security Advisoryexternal
- WID-SEC-W-2022-0333 - CSAF Versionself
- WID-SEC-2022-0333 - Portal Versionself
- AMD Security Bulletin AMD-SB-1038 vom 2022-06-14external
- Hertzbleed Attack Webseite vom 2022-06-14external
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan