Login Request a demo
Medium severity · published Aug 14, 2018
CVE-2018-3620
Systems with microprocessors utilizing speculative execution and address translations may allow unauthorized disclosure of information residing in the L1 data cache to an attacker…
5.6
CVSS
5.6%
EPSS
No
On KEV
Description
Systems with microprocessors utilizing speculative execution and address translations may allow unauthorized disclosure of information residing in the L1 data cache to an attacker with local user access via a terminal page fault and a side-channel analysis.
CVSS vector
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N
Attack vector
Local
Complexity
High
Privileges
Low
User interaction
None
Confidentiality
High
Integrity
None
Availability
None
Scope
Changed
Exploitation
Is it being used?
Exploit prediction (EPSS)5.6% · higher than 93% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
MU
Multiple · Intel Corporation
Multiple · source: vendor
CI
Core I3 · Intel
330e; 330m; 330um; 350m; 370m; 380m; +34 more · source: NVD
CI
Core I5 · Intel
430m; 430um; 450m; 460m; 470um; 480m; +34 more · source: NVD
CI
Core I7 · Intel
7y75; 610e; 620le; 620lm; 620m; 620ue; +34 more · source: NVD
CM
Core M · Intel
5y10; 5y10a; 5y10c; 5y31; 5y51; 5y70; +1 more · source: NVD
CM
Core M3 · Intel
6y30; 7y30; 7y32 · source: NVD
CM
Core M5 · Intel
6y54; 6y57 · source: NVD
CM
Core M7 · Intel
6y75 · source: NVD
XE
Xeon · Intel
All versions, or not specified · source: NVD
Affected product
MU
Multiple
Intel Corporation
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2018-3620
CVE.org
https://www.cve.org/CVERecord?id=CVE-2018-3620
Third Party Advisory
http://support.lenovo.com/us/en/solutions/LEN-24163
Third Party Advisory
http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20180815-01-cpu-en
Third Party Advisory
http://www.securityfocus.com/bid/105080
Third Party Advisory
http://www.securitytracker.com/id/1041451
Third Party Advisory
http://www.vmware.com/security/advisories/VMSA-2018-0021.html
Third Party Advisory
http://xenbits.xen.org/xsa/advisory-273.html
More from Multiple
7.3
CVE-2018-3615
Systems with microprocessors utilizing speculative execution and Intel software guard extensions (Intel SGX) may allow unauthorized disclosure of information residing in the L1…
5.6
CVE-2018-3646
Systems with microprocessors utilizing speculative execution and address translations may allow unauthorized disclosure of information residing in the L1 data cache to an attacker…