High severity · published Aug 14, 2018
CVE-2018-3615
Systems with microprocessors utilizing speculative execution and Intel software guard extensions (Intel SGX) may allow unauthorized disclosure of information residing in the L1…
7.3
CVSS
6.3%
EPSS
No
On KEV
Description
Systems with microprocessors utilizing speculative execution and Intel software guard extensions (Intel SGX) may allow unauthorized disclosure of information residing in the L1 data cache from an enclave to an attacker with local user access via a side-channel analysis.
CVSS vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:L/A:N
Attack vector
Local
Complexity
Low
Privileges
Low
User interaction
None
Confidentiality
High
Integrity
Low
Availability
None
Scope
Changed
Exploitation
Is it being used?
Exploit prediction (EPSS)6.3% · higher than 94% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
MU
Multiple · Intel Corporation
Multiple · source: vendor
CI
Core I3 · Intel
6006u; 6098p; 6100; 6100e; 6100h; 6100t; +10 more · source: NVD
CI
Core I5 · Intel
650; 655k; 660; 661; 670; 680; +29 more · source: NVD
CI
Core I7 · Intel
610e; 620le; 620lm; 620m; 620ue; 620um; +34 more · source: NVD
XE
Xeon E3 · Intel
1515m_v5; 1535m_v5; 1545m_v5; 1558l_v5; 1565l_v5; 1575m_v5; +5 more · source: NVD
XE
Xeon E3 1220 V5 · Intel
All versions, or not specified · source: NVD
XE
Xeon E3 1220 V6 · Intel
All versions, or not specified · source: NVD
XE
Xeon E3 1225 V5 · Intel
All versions, or not specified · source: NVD
XE
Xeon E3 1225 V6 · Intel
All versions, or not specified · source: NVD
XE
Xeon E3 1230 V5 · Intel
All versions, or not specified · source: NVD
XE
Xeon E3 1230 V6 · Intel
All versions, or not specified · source: NVD
XE
Xeon E3 1235l V5 · Intel
All versions, or not specified · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2018-3615
CVE.org
https://www.cve.org/CVERecord?id=CVE-2018-3615
Third Party Advisory
http://support.lenovo.com/us/en/solutions/LEN-24163
Third Party Advisory
http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20180815-01-cpu-en
Third Party Advisory
http://www.securityfocus.com/bid/105080
Third Party Advisory
http://www.securitytracker.com/id/1041451
cert-portal.siemens.com
https://cert-portal.siemens.com/productcert/pdf/ssa-254686.pdf
cert-portal.siemens.com
https://cert-portal.siemens.com/productcert/pdf/ssa-608355.pdf
More from Multiple
5.6
CVE-2018-3620
Systems with microprocessors utilizing speculative execution and address translations may allow unauthorized disclosure of information residing in the L1 data cache to an attacker…
5.6
CVE-2018-3646
Systems with microprocessors utilizing speculative execution and address translations may allow unauthorized disclosure of information residing in the L1 data cache to an attacker…