CVE-2018-3615
Quick assessment
Affected
Intel Corporation Multiple
Exploitation
High exploitation probability; assess promptly
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
Intel Xeon Processor E3 v5 Family等都是美国英特尔（Intel）公司的中央处理器（CPU）产品。 多款Intel产品（使用推测执行和Intel软件防护扩展（Intel SGX））中存在信息泄露漏洞。本地攻击者可利用该漏洞泄露L1数据缓存中的信息。以下产品受到影响：Intel Xeon Processor E3 v5 Family；Intel Xeon Processor E3 v6 Family；6th generation Intel Core processors；7t
Possible ATT&CK Techniques 1 AI
T1011 · Exfiltration Over Other Network MediumAffected Version Matrix 1
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| Intel Corporation | Multiple | Multiple |
affected |
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2018-3615
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Source: CVE Program / CVE List V5
Vulnerability Description
Systems with microprocessors utilizing speculative execution and Intel software guard extensions (Intel SGX) may allow unauthorized disclosure of information residing in the L1 data cache from an enclave to an attacker with local user access via a side-channel analysis.
Source: CVE Program / CVE List V5
CVSS Information
N/A
Source: CVE Program / CVE List V5
Vulnerability Type
N/A
Source: CVE Program / CVE List V5
Vulnerability Title
多款Intel产品信息泄露漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Intel Xeon Processor E3 v5 Family等都是美国英特尔（Intel）公司的中央处理器（CPU）产品。 多款Intel产品（使用推测执行和Intel软件防护扩展（Intel SGX））中存在信息泄露漏洞。本地攻击者可利用该漏洞泄露L1数据缓存中的信息。以下产品受到影响：Intel Xeon Processor E3 v5 Family；Intel Xeon Processor E3 v6 Family；6th generation Intel Core processors；7t
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| Intel Corporation | Multiple | Multiple | - |
|
II. Public POCs for CVE-2018-3615
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2018-3615
请登录查看更多情报信息。
Vendor Advisories for CVE-2018-3615 (9)
-
https://cert-portal.siemens.com/productcert/pdf/ssa-608355.pdf x_refsource_CONFIRM
-
https://security.netapp.com/advisory/ntap-20180815-0001/ x_refsource_CONFIRM
-
http://support.lenovo.com/us/en/solutions/LEN-24163 x_refsource_CONFIRM
-
https://support.f5.com/csp/article/K35558453 x_refsource_CONFIRM
-
https://cert-portal.siemens.com/productcert/pdf/ssa-254686.pdf x_refsource_CONFIRM
-
-
-
-
https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180814-cpusidechannel vendor-advisory x_refsource_CISCO
Mailing List Discussions for CVE-2018-3615 (1)
Other References for CVE-2018-3615 (6)
-
https://www.synology.com/support/security/Synology_SA_18_45 x_refsource_CONFIRM
-
https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2018-0008 x_refsource_CONFIRM
-
https://foreshadowattack.eu/ x_refsource_MISC
Same Patch Batch · Intel Corporation · 2018-08-14 · 3 CVEs total
| CVE-2018-3620 | 多款Intel产品信息泄露漏洞 | |
| CVE-2018-3646 | 多款Intel产品信息泄露漏洞 |
IV. Related Vulnerabilities
V. Comments for CVE-2018-3615
No comments yet