CVE-2022-24436

—1

CVSS 3.1

6.5 medium

EPSS

12%p96

Published

Jun 15, 2022 (Jun 15, 2022)

Modified

Jun 17, 2026

Description

Observable behavioral in power management throttling for some Intel(R) Processors may allow an authenticated user to potentially enable information disclosure via network access.

Vendors: intel
Weakness: CWE-203
Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

NVD CVE.org GitHub PoCs EPSS (12.3%)

In the news3 stories

Hertzbleed Side-Channel Attack allows to remotely steal encryption keys from AMD and Intel chips

Security AffairsJun 15, 22:59 UTC · Jun 15, 2022Exploit / PoC CVE-2022-23823 CVE-2022-24436

US Researchers Spot New Hertzbleed Flaw Affecting AMD and Intel CPUs

Infosecurity MagazineJun 15, 16:00 UTC · Jun 15, 2022Vulnerability CVE-2022-23823 CVE-2022-24436

New Hertzbleed Side Channel Attack Affects All Modern AMD and Intel CPUs

The Hacker NewsJun 15, 00:00 UTC · Jun 15, 2022Vulnerability CVE-2022-23823 CVE-2022-24436