Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

CVE-2018-3619

Quick assessment

Affected
Intel Corporation Intel Optane memory
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

Intel Optane memory module with Whole Disk Encryption是美国英特尔(Intel)公司的一款带有全盘加密功能的内存模块。 带有Intel Optane memory模块(该模块带有Whole Disk Encryption)中的storage media存在信息泄露漏洞。攻击者可利用该漏洞获取数据。以下产品受到影响:Intel 7th Gen Intel Core Desktop Processors;8th Gen Intel Core Desktop

AI Predicted 4.3 Difficulty: Moderate EPSS 0.21% · P11

Possible ATT&CK Techniques 1 AI

T1565.001 · Stored Data Manipulation
Get alerts for future matching vulnerabilities Log in to subscribe

I. Basic Information for CVE-2018-3619

Vulnerability Information

Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
N/A
Source: CVE Program / CVE List V5
Vulnerability Description
Information disclosure vulnerability in storage media in systems with Intel Optane memory module with Whole Disk Encryption may allow an attacker to recover data via physical access.
Source: CVE Program / CVE List V5
CVSS Information
N/A
Source: CVE Program / CVE List V5
Vulnerability Type
N/A
Source: CVE Program / CVE List V5
Vulnerability Title
Intel Optane memory模块信息泄露漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Intel Optane memory module with Whole Disk Encryption是美国英特尔(Intel)公司的一款带有全盘加密功能的内存模块。 带有Intel Optane memory模块(该模块带有Whole Disk Encryption)中的storage media存在信息泄露漏洞。攻击者可利用该漏洞获取数据。以下产品受到影响:Intel 7th Gen Intel Core Desktop Processors;8th Gen Intel Core Desktop
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)

Affected Products

Vendor Product Affected Versions CPE Subscribe
Intel Corporation Intel Optane memory 1.0 -

II. Public POCs for CVE-2018-3619

# POC Description Source Link Shenlong Link
AI-Generated POC Premium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2018-3619

请登录查看更多情报信息。

Other References for CVE-2018-3619 (1)

Same Patch Batch · Intel Corporation · 2018-07-10 · 15 CVEs total

CVE-2017-5704 多款Intel产品安全漏洞
CVE-2018-3627 Intel Converged Security Management Engine 安全漏洞
CVE-2018-3628 Intel Converged Security Manageability Engine Active Management Technology 缓冲区错误漏洞
CVE-2018-3629 Intel Converged Security Manageability Engine Active Management Technology 缓冲区错误漏洞
CVE-2018-3632 Intel Converged Security Manageability Engine Active Management Technology 缓冲区错误漏洞
CVE-2018-3652 多款Intel产品安全漏洞
CVE-2018-3667 Intel Processor Diagnostic Tool 安全漏洞
CVE-2018-3668 Intel Processor Diagnostic Tool 安全漏洞
CVE-2018-3682 Intel Server Board、Compute Module和Server System 安全漏洞
CVE-2018-3683 Intel Quartus Prime 安全漏洞
CVE-2018-3684 Intel Quartus II 安全漏洞
CVE-2018-3687 Intel Quartus II Programmer and Tools 安全漏洞
CVE-2018-3688 Intel Quartus Prime Programmer and Tools 安全漏洞
CVE-2018-3693 ARM和Intel处理器信息泄露漏洞

IV. Related Vulnerabilities

V. Comments for CVE-2018-3619

No comments yet


Leave a comment