Vulnerability in Intel Core I3
CVE-2018-3615
Systems with microprocessors utilizing speculative execution and Intel software guard extensions (Intel SGX) may allow unauthorized disclosure of information residing in the L1 data cache from an enclave to an attacker with local user access via a side-channel analysis.
Published · last modified .
CVSS v3 metric
CVSS v3 base score 7.3 (High). Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:L/A:N.
EPSS exploit prediction
EPSS: 0.063 (93.6th percentile), scored .
Low probability of exploitation in the next 30 days, but still tracked. 94th percentile — 93.6% of CVEs in the catalogue have a lower EPSS than this one. How to read EPSS.
EPSS over last 30 days · oldest: 0.063 · newest: 0.063 · change: 0.000
Affected products
- Intel Core I3 — versions 6006u, 6098p, 6100
- Intel Core I5 — versions 650, 655k, 660
- Intel Core I7 — versions 610e, 620le, 620lm
- Intel Xeon E3 — versions 1515m_v5, 1535m_v5, 1545m_v5
- Intel Xeon E3 1220 V5
- Intel Xeon E3 1220 V6
- Intel Xeon E3 1225 V5
- Intel Xeon E3 1225 V6
- Intel Xeon E3 1230 V5
- Intel Xeon E3 1230 V6
Weakness classification (CWE)
Public proof-of-concept exploits
References
- www.kb.cert.org/vuls/id/982149 (Third Party Advisory, third-party-advisory)
- www.securitytracker.com/id/1041451 (VDB Entry, Third Party Advisory, vdb-entry)
- psirt.global.sonicwall.com/vuln-detail/SNWLID-2018-0008 (Third Party Advisory)
- www.securityfocus.com/bid/105080 (VDB Entry, Third Party Advisory, vdb-entry)
- foreshadowattack.eu/ (Technical Description, Third Party Advisory)
- security.netapp.com/advisory/ntap-20180815-0001/ (Third Party Advisory)
- tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180814… (vendor-advisory, Third Party Advisory)
- support.f5.com/csp/article/K35558453 (Third Party Advisory)
- support.lenovo.com/us/en/solutions/LEN-24163 (Third Party Advisory)
- www.huawei.com/en/psirt/security-advisories/huawei-sa-20180815-01-cpu-en (Third Party Advisory)
Frequently asked questions
- What is CVE-2018-3615?
- CVE-2018-3615 is a high-severity vulnerability in Intel Core I3, classified under Observable Discrepancy. CVSS score: 7.3/10. Published 2018-08-14.
- How severe is CVE-2018-3615?
- High severity. CVSS v3 base score is 7.3 out of 10.
- Is CVE-2018-3615 known to be exploited?
- 23 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.