CVE-2022-34632 is a critical vulnerability affecting the Linux Foundation's Rocket-Chip Generator, specifically in commit 4f8114374d8824dfdec03f576a8cd68bebce4e56 within the /rocket/RocketCore.scala component, due to insufficient cryptography. With a CVSS score of 9.1 (CRITICAL), this vulnerability is remotely exploitable with low attack complexity, allowing for high impact on confidentiality and integrity without user interaction. There is no evidence of active exploitation, nor are there publicly available exploit modules in Metasploit, Nuclei, or ExploitDB. Despite the lack of active exploits, the vulnerability has garnered significant community discussion, indicating awareness and potential future interest.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
Range not provided by sourceCPE matchmatch criteria | cpe:2.3:a:linuxfoundation:rocket_chip_generator:-:*:*:*:*:*:*:* |
CVSS version used by this source: 3.1
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
The average CVE in this peer group has 0.0 Twitter, 0.1 Reddit, 0.3 Bluesky, 0.3 Mastodon, and 2.4 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.3 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.