CVE Feed

    Dashboard / CVE / CVE-2022-33023

    CVE-2022-33023

    CVA6 commit 909d85a gives incorrect permission to use special multiplication units when the format of instructions is wrong.

    Published:Jun 29, 2022
    Last Modified:Nov 21, 2024
    EPS:Jun 29, 2022
    EPSS Score:0.00157
    CVSS Score:7.5

    Affected Products

    Vendor
    Openhwgroup
    Product
    Cva6

    Exploits

    No exploit reference

    Common Weakness Enumeration

    CWE-276 Incorrect Default Permissions

    Related CVEs

    CVE-2022-34641 (CVSS 5.5) — CVA6 commit d315ddd0f1be27c1b3f27eb0b8daf471a952299a and RISCV-Boom commit ad64c5419151e5e886daee7084d8399713b…
    CVE-2022-34640 (CVSS 5.5) — The *tval of ecall/ebreak in CVA6 commit d315ddd0f1be27c1b3f27eb0b8daf471a952299a was discovered to be incorre…
    CVE-2022-34639 (CVSS 5.5) — CVA6 commit d315ddd0f1be27c1b3f27eb0b8daf471a952299a treats non-standard fence instructions as illegal which c…
    CVE-2022-34637 (CVSS 5.5) — CVA6 commit d315ddd0f1be27c1b3f27eb0b8daf471a952299a implements an incorrect exception type when an illegal vi…
    CVE-2022-34636 (CVSS 5.5) — CVA6 commit d315ddd0f1be27c1b3f27eb0b8daf471a952299a and RISCV-Boom commit ad64c5419151e5e886daee7084d8399713b…
    CVE-2022-34635 (CVSS 9.8) — The mstatus.sd field in CVA6 commit d315ddd0f1be27c1b3f27eb0b8daf471a952299a does not update when the mstatus.…
    CVE-2022-34634 (CVSS 5.5) — CVA6 commit d315ddd0f1be27c1b3f27eb0b8daf471a952299a executes crafted or incorrectly formatted det instruction…
    CVE-2022-34633 (CVSS 5.5) — CVA6 commit d315ddd0f1be27c1b3f27eb0b8daf471a952299a executes crafted or incorrectly formatted sfence.vma inst…
    CVE-2022-33021 (CVSS 7.5) — CVA6 commit 909d85a accesses invalid memory when reading the value of MHPMCOUNTER30.…

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High