// For flags

CVE-2022-34641

 

Severity Score

5.5
*CVSS v3.1

Exploit Likelihood

*EPSS

Affected Versions

*CPE

Public Exploits

2
*Multiple Sources

Exploited in Wild

-
*KEV

Decision

-
*SSVC
Descriptions

CVA6 commit d315ddd0f1be27c1b3f27eb0b8daf471a952299a and RISCV-Boom commit ad64c5419151e5e886daee7084d8399713b46b4b implements the incorrect exception type when a PMP violation occurs during address translation.

El commit d315ddd0f1be27c1b3f27eb0b8daf471a952299a de CVA6 y el commit ad64c5419151e5e886daee7084d8399713b46b4b de RISCV-Boom implementan el tipo de excepción incorrecto cuando es producida una violación de PMP durante la traducción de direcciones.

*Credits: N/A
CVSS Scores
Attack Vector
Local
Attack Complexity
Low
Privileges Required
Low
User Interaction
None
Scope
Unchanged
Confidentiality
None
Integrity
None
Availability
High
* Common Vulnerability Scoring System
SSVC
  • Decision:-
Exploitation
-
Automatable
-
Tech. Impact
-
* Organization's Worst-case Scenario
Timeline
  • 2022-06-26 CVE Reserved
  • 2022-07-18 CVE Published
  • 2024-08-03 CVE Updated
  • 2024-08-03 First Exploit
  • 2024-10-09 EPSS Updated
  • ---------- Exploited in Wild
  • ---------- KEV Due Date
CWE
  • CWE-755: Improper Handling of Exceptional Conditions
CAPEC
Affected Vendors, Products, and Versions
Vendor Product Version Other Status
Vendor Product Version Other Status <-- --> Vendor Product Version Other Status
Boom-core
Search vendor "Boom-core"
 Riscvc-boom
Search vendor "Boom-core" for product "Riscvc-boom"
--
Affected
Openhwgroup
Search vendor "Openhwgroup"
 Cva6
Search vendor "Openhwgroup" for product "Cva6"
--
Affected