Vulnerability in Arm Cortex-A
CVE-2018-3640
Systems with microprocessors utilizing speculative execution and that perform speculative reads of system registers may allow unauthorized disclosure of system parameters to an attacker with local user access via a side-channel analysis, aka Rogue System Register Read (RSRE), Variant 3a.
Published · last modified .
CVSS v3 metric
CVSS v3 base score 5.6 (Medium). Vector: CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N.
EPSS exploit prediction
EPSS: 0.071 (94.3th percentile), scored .
Low probability of exploitation in the next 30 days, but still tracked. 94th percentile — 94.3% of CVEs in the catalogue have a lower EPSS than this one. How to read EPSS.
EPSS over last 30 days · oldest: 0.075 · newest: 0.071 · change: -0.003
Affected products
- Arm Cortex-A — versions 15, 57, 72
- Intel Atom C — versions c2308, c3308, c3338
- Intel Atom E — versions e3805, e3815, e3825
- Intel Atom Z — versions z2420, z2460, z2480
- Intel Celeron J — versions j3455, j4005, j4105
- Intel Celeron N — versions n3450
- Intel Core I3 — versions 32nm, 45nm
- Intel Core I5 — versions 32nm, 45nm
- Intel Core I7 — versions 32nm, 45nm
- Intel Core M — versions 32nm, 45nm
Weakness classification (CWE)
Public proof-of-concept exploits
References
- cert-portal.siemens.com/productcert/pdf/ssa-268644.pdf
- support.lenovo.com/us/en/solutions/LEN-22133 (Third Party Advisory)
- www.us-cert.gov/ncas/alerts/TA18-141A (US Government Resource, Third Party Advisory, third-party-advisory)
- www.securitytracker.com/id/1042004 (vdb-entry)
- www.securitytracker.com/id/1040949 (VDB Entry, Third Party Advisory, vdb-entry)
- psirt.global.sonicwall.com/vuln-detail/SNWLID-2018-0005
- www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00115.html (Vendor Advisory)
- www.synology.com/support/security/Synology_SA_18_23 (Third Party Advisory)
- developer.arm.com/support/arm-security-updates/speculative-processor-vulnerabil… (Vendor Advisory)
- www.kb.cert.org/vuls/id/180049 (US Government Resource, Third Party Advisory, third-party-advisory)
Frequently asked questions
- What is CVE-2018-3640?
- CVE-2018-3640 is a medium-severity vulnerability in Arm Cortex-A, classified under Observable Discrepancy. CVSS score: 5.6/10. Published 2018-05-22.
- How severe is CVE-2018-3640?
- Medium severity. CVSS v3 base score is 5.6 out of 10.
- Is CVE-2018-3640 known to be exploited?
- 24 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.