Medium severity · published Jul 10, 2018
CVE-2018-3693
Systems with microprocessors utilizing speculative execution and branch prediction may allow unauthorized disclosure of information to an attacker with local user access via a…
5.6
CVSS
8.6%
EPSS
No
On KEV
Description
Systems with microprocessors utilizing speculative execution and branch prediction may allow unauthorized disclosure of information to an attacker with local user access via a speculative buffer overflow and side-channel analysis.
CVSS vector
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N
Attack vector
Local
Complexity
High
Privileges
Low
User interaction
None
Confidentiality
High
Integrity
None
Availability
None
Scope
Changed
Exploitation
Is it being used?
Exploit prediction (EPSS)8.6% · higher than 95% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
AC
Atom C · Intel
c2308; c2316; c2338; c2350; c2358; c2508; +26 more · source: NVD
AE
Atom E · Intel
e3805; e3815; e3825; e3826; e3827; e3845 · source: NVD
AX
Atom X3 · Intel
c3130; c3200rk; c3205rk; c3230rk; c3235rk; c3265rk; +3 more · source: NVD
AZ
Atom Z · Intel
z2420; z2460; z2480; z2520; z2560; z2580; +24 more · source: NVD
CJ
Celeron J · Intel
j1750; j1800; j1850; j1900; j3060; j3160; +4 more · source: NVD
CN
Celeron N · Intel
n2805; n2806; n2807; n2808; n2810; n2815; +17 more · source: NVD
CI
Core I3 · Intel
330e; 330m; 330um; 350m; 370m; 380m; +34 more · source: NVD
CI
Core I5 · Intel
430m; 430um; 450m; 460m; 470um; 480m; +34 more · source: NVD
CI
Core I7 · Intel
7y75; 610e; 620le; 620lm; 620m; 620ue; +34 more · source: NVD
CM
Core M · Intel
5y10; 5y10a; 5y10c; 5y31; 5y51; 5y70; +1 more · source: NVD
CM
Core M3 · Intel
6y30; 7y30; 7y32 · source: NVD
CM
Core M5 · Intel
6y54; 6y57 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2018-3693
CVE.org
https://www.cve.org/CVERecord?id=CVE-2018-3693
Third Party Advisory
https://access.redhat.com/errata/RHSA-2018:2384
Third Party Advisory
https://access.redhat.com/errata/RHSA-2018:2390
Third Party Advisory
https://access.redhat.com/errata/RHSA-2018:2395
Third Party Advisory
https://access.redhat.com/errata/RHSA-2019:1946
Third Party Advisory
https://access.redhat.com/errata/RHSA-2020:0174
Third Party Advisory
https://cdrdv2.intel.com/v1/dl/getContent/685359
More from Atom C
7.6
CVE-2018-3652
Existing UEFI setting restrictions for DCI (Direct Connect Interface) in 5th and 6th generation Intel Xeon Processor E3 Family, Intel Xeon Scalable processors, and Intel Xeon…
5.6
CVE-2018-3640
Systems with microprocessors utilizing speculative execution and that perform speculative reads of system registers may allow unauthorized disclosure of system parameters to an…
5.6
CVE-2018-9056
Systems with microprocessors utilizing speculative execution may allow unauthorized disclosure of information to an attacker with local user access via a side-channel attack on…
5.6
CVE-2017-5754
Systems with microprocessors utilizing speculative execution and indirect branch prediction may allow unauthorized disclosure of information to an attacker with local user access…
5.6
CVE-2017-5753
Systems with microprocessors utilizing speculative execution and branch prediction may allow unauthorized disclosure of information to an attacker with local user access via a…