PT-2023-15648 · Arm · Armv8

Published 2023-01-10 · Updated 2024-08-03 · CVE-2022-48251

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions ARMv8 (affected versions not specified)

Description The AES instructions on the ARMv8 platform do not have an algorithm that is intrinsically resistant to side-channel attacks. The vendor notes that while power side channel attacks are possible, they are not directly caused by or related to the Arm architecture.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Side Channel Attack

Weakness Enumeration

CWE-203

Related Identifiers

CVE-2022-48251

Affected Products

Armv8

References · 6

• 🔥 https://eshard.com/posts/sca-attacks-on-armv8 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2022-48251 · Security Note
• https://t.me/cvenotify/41683 · Telegram Post
• https://eprint.iacr.org/2022/230 · Note
• https://t.me/cvenotify/88791 · Telegram Post
• https://t.me/cvenotify/42508 · Telegram Post