PT-2023-15648 · Arm · Armv8

CVE-2022-48251 · Publicado 2023-01-10 · Atualizado 2024-08-03

Positive Technologies (AI Summary)

CVSS v3.1

7.5

Alta

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions ARMv8 (affected versions not specified)

Description The AES instructions on the ARMv8 platform do not have an algorithm that is intrinsically resistant to side-channel attacks. The vendor notes that while power side channel attacks are possible, they are not directly caused by or related to the Arm architecture.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Side Channel Attack

Enumeração de Fraquezas

CWE-203

Identificadores relacionados

CVE-2022-48251

Produtos afetados

Armv8

Referências · 6

• 🔥 https://eshard.com/posts/sca-attacks-on-armv8 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2022-48251 · Nota de Segurança
• https://t.me/cvenotify/41683 · Publicação no Telegram
• https://eprint.iacr.org/2022/230 · Nota
• https://t.me/cvenotify/88791 · Publicação no Telegram
• https://t.me/cvenotify/42508 · Publicação no Telegram