Observable discrepancy in Intel Multiple
Key facts
- Attack vector
- Local
- Privileges required
- Low
- User interaction
- None
- Attack complexity
- Low
- Impact type
- Information disclosure
- Confidentiality · integrity · availability
- High · Low · None
- Fix status
- Fixed
Attack profile from CVSS 3.1 · CISA ADP. Fix status from CNA and Microsoft. Impact type from CWE-203.
Summary
Systems with microprocessors utilizing speculative execution and Intel software guard extensions (Intel SGX) may allow unauthorized disclosure of information residing in the L1 data cache from an enclave to an attacker with local user access via a side-channel analysis.
Why it matters now
SSVC decision points
CISA ADP · SSVC 2.0.3
- Exploitation
- None
- Automatable
- No
- Technical impact
- Partial
The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| Intel | Multiple | Multiple | — | No fix listed | CNA |
- Multiple VendorIntel Affected Multiple Fixed in — No fix listed CNA
CPE configurations NVD · 129
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:h:intel:core_i3:6006u:*:*:*:*:*:*:* | 6006u | Vulnerable | Intel |
| cpe:2.3:h:intel:core_i3:6098p:*:*:*:*:*:*:* | 6098p | Vulnerable | Intel |
| cpe:2.3:h:intel:core_i3:6100:*:*:*:*:*:*:* | 6100 | Vulnerable | Intel |
| cpe:2.3:h:intel:core_i3:6100e:*:*:*:*:*:*:* | 6100e | Vulnerable | Intel |
| cpe:2.3:h:intel:core_i3:6100h:*:*:*:*:*:*:* | 6100h | Vulnerable | Intel |
| cpe:2.3:h:intel:core_i3:6100t:*:*:*:*:*:*:* | 6100t | Vulnerable | Intel |
| cpe:2.3:h:intel:core_i3:6100te:*:*:*:*:*:*:* | 6100te | Vulnerable | Intel |
| cpe:2.3:h:intel:core_i3:6100u:*:*:*:*:*:*:* | 6100u | Vulnerable | Intel |
| cpe:2.3:h:intel:core_i3:6102e:*:*:*:*:*:*:* | 6102e | Vulnerable | Intel |
| cpe:2.3:h:intel:core_i3:6157u:*:*:*:*:*:*:* | 6157u | Vulnerable | Intel |
- cpe:2.3:h:intel:core_i3:6006u:*:*:*:*:*:*:* Versions 6006u Vulnerable ·Intel
- cpe:2.3:h:intel:core_i3:6098p:*:*:*:*:*:*:* Versions 6098p Vulnerable ·Intel
- cpe:2.3:h:intel:core_i3:6100:*:*:*:*:*:*:* Versions 6100 Vulnerable ·Intel
- cpe:2.3:h:intel:core_i3:6100e:*:*:*:*:*:*:* Versions 6100e Vulnerable ·Intel
- cpe:2.3:h:intel:core_i3:6100h:*:*:*:*:*:*:* Versions 6100h Vulnerable ·Intel
- cpe:2.3:h:intel:core_i3:6100t:*:*:*:*:*:*:* Versions 6100t Vulnerable ·Intel
- cpe:2.3:h:intel:core_i3:6100te:*:*:*:*:*:*:* Versions 6100te Vulnerable ·Intel
- cpe:2.3:h:intel:core_i3:6100u:*:*:*:*:*:*:* Versions 6100u Vulnerable ·Intel
- cpe:2.3:h:intel:core_i3:6102e:*:*:*:*:*:*:* Versions 6102e Vulnerable ·Intel
- cpe:2.3:h:intel:core_i3:6157u:*:*:*:*:*:*:* Versions 6157u Vulnerable ·Intel
Show 119 more CPE
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:h:intel:core_i3:6167u:*:*:*:*:*:*:* | 6167u | Vulnerable | Intel |
| cpe:2.3:h:intel:core_i3:6300:*:*:*:*:*:*:* | 6300 | Vulnerable | Intel |
| cpe:2.3:h:intel:core_i3:6300t:*:*:*:*:*:*:* | 6300t | Vulnerable | Intel |
| cpe:2.3:h:intel:core_i3:6320:*:*:*:*:*:*:* | 6320 | Vulnerable | Intel |
| cpe:2.3:h:intel:core_i5:650:*:*:*:*:*:*:* | 650 | Vulnerable | Intel |
| cpe:2.3:h:intel:core_i5:655k:*:*:*:*:*:*:* | 655k | Vulnerable | Intel |
| cpe:2.3:h:intel:core_i5:660:*:*:*:*:*:*:* | 660 | Vulnerable | Intel |
| cpe:2.3:h:intel:core_i5:661:*:*:*:*:*:*:* | 661 | Vulnerable | Intel |
| cpe:2.3:h:intel:core_i5:670:*:*:*:*:*:*:* | 670 | Vulnerable | Intel |
| cpe:2.3:h:intel:core_i5:680:*:*:*:*:*:*:* | 680 | Vulnerable | Intel |
| cpe:2.3:h:intel:core_i5:6200u:*:*:*:*:*:*:* | 6200u | Vulnerable | Intel |
| cpe:2.3:h:intel:core_i5:6260u:*:*:*:*:*:*:* | 6260u | Vulnerable | Intel |
| cpe:2.3:h:intel:core_i5:6267u:*:*:*:*:*:*:* | 6267u | Vulnerable | Intel |
| cpe:2.3:h:intel:core_i5:6287u:*:*:*:*:*:*:* | 6287u | Vulnerable | Intel |
| cpe:2.3:h:intel:core_i5:6300hq:*:*:*:*:*:*:* | 6300hq | Vulnerable | Intel |
| cpe:2.3:h:intel:core_i5:6300u:*:*:*:*:*:*:* | 6300u | Vulnerable | Intel |
| cpe:2.3:h:intel:core_i5:6350hq:*:*:*:*:*:*:* | 6350hq | Vulnerable | Intel |
| cpe:2.3:h:intel:core_i5:6360u:*:*:*:*:*:*:* | 6360u | Vulnerable | Intel |
| cpe:2.3:h:intel:core_i5:6400:*:*:*:*:*:*:* | 6400 | Vulnerable | Intel |
| cpe:2.3:h:intel:core_i5:6400t:*:*:*:*:*:*:* | 6400t | Vulnerable | Intel |
| cpe:2.3:h:intel:core_i5:6402p:*:*:*:*:*:*:* | 6402p | Vulnerable | Intel |
| cpe:2.3:h:intel:core_i5:6440eq:*:*:*:*:*:*:* | 6440eq | Vulnerable | Intel |
| cpe:2.3:h:intel:core_i5:6440hq:*:*:*:*:*:*:* | 6440hq | Vulnerable | Intel |
| cpe:2.3:h:intel:core_i5:6442eq:*:*:*:*:*:*:* | 6442eq | Vulnerable | Intel |
| cpe:2.3:h:intel:core_i5:6500:*:*:*:*:*:*:* | 6500 | Vulnerable | Intel |
| cpe:2.3:h:intel:core_i5:6500t:*:*:*:*:*:*:* | 6500t | Vulnerable | Intel |
| cpe:2.3:h:intel:core_i5:6500te:*:*:*:*:*:*:* | 6500te | Vulnerable | Intel |
| cpe:2.3:h:intel:core_i5:6585r:*:*:*:*:*:*:* | 6585r | Vulnerable | Intel |
| cpe:2.3:h:intel:core_i5:6600:*:*:*:*:*:*:* | 6600 | Vulnerable | Intel |
| cpe:2.3:h:intel:core_i5:6600k:*:*:*:*:*:*:* | 6600k | Vulnerable | Intel |
| cpe:2.3:h:intel:core_i5:6600t:*:*:*:*:*:*:* | 6600t | Vulnerable | Intel |
| cpe:2.3:h:intel:core_i5:6685r:*:*:*:*:*:*:* | 6685r | Vulnerable | Intel |
| cpe:2.3:h:intel:core_i7:610e:*:*:*:*:*:*:* | 610e | Vulnerable | Intel |
| cpe:2.3:h:intel:core_i7:620le:*:*:*:*:*:*:* | 620le | Vulnerable | Intel |
| cpe:2.3:h:intel:core_i7:620lm:*:*:*:*:*:*:* | 620lm | Vulnerable | Intel |
| cpe:2.3:h:intel:core_i7:620m:*:*:*:*:*:*:* | 620m | Vulnerable | Intel |
| cpe:2.3:h:intel:core_i7:620ue:*:*:*:*:*:*:* | 620ue | Vulnerable | Intel |
| cpe:2.3:h:intel:core_i7:620um:*:*:*:*:*:*:* | 620um | Vulnerable | Intel |
| cpe:2.3:h:intel:core_i7:640lm:*:*:*:*:*:*:* | 640lm | Vulnerable | Intel |
| cpe:2.3:h:intel:core_i7:640m:*:*:*:*:*:*:* | 640m | Vulnerable | Intel |
| cpe:2.3:h:intel:core_i7:640um:*:*:*:*:*:*:* | 640um | Vulnerable | Intel |
| cpe:2.3:h:intel:core_i7:660lm:*:*:*:*:*:*:* | 660lm | Vulnerable | Intel |
| cpe:2.3:h:intel:core_i7:660ue:*:*:*:*:*:*:* | 660ue | Vulnerable | Intel |
| cpe:2.3:h:intel:core_i7:660um:*:*:*:*:*:*:* | 660um | Vulnerable | Intel |
| cpe:2.3:h:intel:core_i7:680um:*:*:*:*:*:*:* | 680um | Vulnerable | Intel |
| cpe:2.3:h:intel:core_i5:750:*:*:*:*:*:*:* | 750 | Vulnerable | Intel |
| cpe:2.3:h:intel:core_i5:750s:*:*:*:*:*:*:* | 750s | Vulnerable | Intel |
| cpe:2.3:h:intel:core_i5:760:*:*:*:*:*:*:* | 760 | Vulnerable | Intel |
| cpe:2.3:h:intel:core_i7:7y75:*:*:*:*:*:*:* | 7y75 | Vulnerable | Intel |
| cpe:2.3:h:intel:core_i7:720qm:*:*:*:*:*:*:* | 720qm | Vulnerable | Intel |
| cpe:2.3:h:intel:core_i7:740qm:*:*:*:*:*:*:* | 740qm | Vulnerable | Intel |
| cpe:2.3:h:intel:core_i7:7500u:*:*:*:*:*:*:* | 7500u | Vulnerable | Intel |
| cpe:2.3:h:intel:core_i7:7560u:*:*:*:*:*:*:* | 7560u | Vulnerable | Intel |
| cpe:2.3:h:intel:core_i7:7567u:*:*:*:*:*:*:* | 7567u | Vulnerable | Intel |
| cpe:2.3:h:intel:core_i7:7600u:*:*:*:*:*:*:* | 7600u | Vulnerable | Intel |
| cpe:2.3:h:intel:core_i7:7660u:*:*:*:*:*:*:* | 7660u | Vulnerable | Intel |
| cpe:2.3:h:intel:core_i7:7700:*:*:*:*:*:*:* | 7700 | Vulnerable | Intel |
| cpe:2.3:h:intel:core_i7:7700hq:*:*:*:*:*:*:* | 7700hq | Vulnerable | Intel |
| cpe:2.3:h:intel:core_i7:7700k:*:*:*:*:*:*:* | 7700k | Vulnerable | Intel |
| cpe:2.3:h:intel:core_i7:7700t:*:*:*:*:*:*:* | 7700t | Vulnerable | Intel |
| cpe:2.3:h:intel:core_i7:7820eq:*:*:*:*:*:*:* | 7820eq | Vulnerable | Intel |
| cpe:2.3:h:intel:core_i7:7820hk:*:*:*:*:*:*:* | 7820hk | Vulnerable | Intel |
| cpe:2.3:h:intel:core_i7:7820hq:*:*:*:*:*:*:* | 7820hq | Vulnerable | Intel |
| cpe:2.3:h:intel:core_i7:7920hq:*:*:*:*:*:*:* | 7920hq | Vulnerable | Intel |
| cpe:2.3:h:intel:core_i3:8100:*:*:*:*:*:*:* | 8100 | Vulnerable | Intel |
| cpe:2.3:h:intel:core_i3:8350k:*:*:*:*:*:*:* | 8350k | Vulnerable | Intel |
| cpe:2.3:h:intel:core_i5:8250u:*:*:*:*:*:*:* | 8250u | Vulnerable | Intel |
| cpe:2.3:h:intel:core_i5:8350u:*:*:*:*:*:*:* | 8350u | Vulnerable | Intel |
| cpe:2.3:h:intel:core_i5:8400:*:*:*:*:*:*:* | 8400 | Vulnerable | Intel |
| cpe:2.3:h:intel:core_i5:8600k:*:*:*:*:*:*:* | 8600k | Vulnerable | Intel |
| cpe:2.3:h:intel:core_i7:820qm:*:*:*:*:*:*:* | 820qm | Vulnerable | Intel |
| cpe:2.3:h:intel:core_i7:840qm:*:*:*:*:*:*:* | 840qm | Vulnerable | Intel |
| cpe:2.3:h:intel:core_i7:860:*:*:*:*:*:*:* | 860 | Vulnerable | Intel |
| cpe:2.3:h:intel:core_i7:860s:*:*:*:*:*:*:* | 860s | Vulnerable | Intel |
| cpe:2.3:h:intel:core_i7:870:*:*:*:*:*:*:* | 870 | Vulnerable | Intel |
| cpe:2.3:h:intel:core_i7:870s:*:*:*:*:*:*:* | 870s | Vulnerable | Intel |
| cpe:2.3:h:intel:core_i7:875k:*:*:*:*:*:*:* | 875k | Vulnerable | Intel |
| cpe:2.3:h:intel:core_i7:880:*:*:*:*:*:*:* | 880 | Vulnerable | Intel |
| cpe:2.3:h:intel:core_i7:8550u:*:*:*:*:*:*:* | 8550u | Vulnerable | Intel |
| cpe:2.3:h:intel:core_i7:8650u:*:*:*:*:*:*:* | 8650u | Vulnerable | Intel |
| cpe:2.3:h:intel:core_i7:8700:*:*:*:*:*:*:* | 8700 | Vulnerable | Intel |
| cpe:2.3:h:intel:core_i7:8700k:*:*:*:*:*:*:* | 8700k | Vulnerable | Intel |
| cpe:2.3:h:intel:xeon_e3:1515m_v5:*:*:*:*:*:*:* | 1515m_v5 | Vulnerable | Intel |
| cpe:2.3:h:intel:xeon_e3:1535m_v5:*:*:*:*:*:*:* | 1535m_v5 | Vulnerable | Intel |
| cpe:2.3:h:intel:xeon_e3:1545m_v5:*:*:*:*:*:*:* | 1545m_v5 | Vulnerable | Intel |
| cpe:2.3:h:intel:xeon_e3:1558l_v5:*:*:*:*:*:*:* | 1558l_v5 | Vulnerable | Intel |
| cpe:2.3:h:intel:xeon_e3:1565l_v5:*:*:*:*:*:*:* | 1565l_v5 | Vulnerable | Intel |
| cpe:2.3:h:intel:xeon_e3:1575m_v5:*:*:*:*:*:*:* | 1575m_v5 | Vulnerable | Intel |
| cpe:2.3:h:intel:xeon_e3:1578l_v5:*:*:*:*:*:*:* | 1578l_v5 | Vulnerable | Intel |
| cpe:2.3:h:intel:xeon_e3:1585_v5:*:*:*:*:*:*:* | 1585_v5 | Vulnerable | Intel |
| cpe:2.3:h:intel:xeon_e3:1585l_v5:*:*:*:*:*:*:* | 1585l_v5 | Vulnerable | Intel |
| cpe:2.3:h:intel:xeon_e3_1220_v5:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Intel |
| cpe:2.3:h:intel:xeon_e3_1225_v5:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Intel |
| cpe:2.3:h:intel:xeon_e3_1230_v5:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Intel |
| cpe:2.3:h:intel:xeon_e3_1235l_v5:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Intel |
| cpe:2.3:h:intel:xeon_e3_1240_v5:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Intel |
| cpe:2.3:h:intel:xeon_e3_1240l_v5:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Intel |
| cpe:2.3:h:intel:xeon_e3_1245_v5:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Intel |
| cpe:2.3:h:intel:xeon_e3_1260l_v5:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Intel |
| cpe:2.3:h:intel:xeon_e3_1268l_v5:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Intel |
| cpe:2.3:h:intel:xeon_e3_1270_v5:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Intel |
| cpe:2.3:h:intel:xeon_e3_1275_v5:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Intel |
| cpe:2.3:h:intel:xeon_e3_1280_v5:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Intel |
| cpe:2.3:h:intel:xeon_e3_1505l_v5:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Intel |
| cpe:2.3:h:intel:xeon_e3_1505m_v5:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Intel |
| cpe:2.3:h:intel:xeon_e3:1505m_v6:*:*:*:*:*:*:* | 1505m_v6 | Vulnerable | Intel |
| cpe:2.3:h:intel:xeon_e3:1535m_v6:*:*:*:*:*:*:* | 1535m_v6 | Vulnerable | Intel |
| cpe:2.3:h:intel:xeon_e3_1220_v6:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Intel |
| cpe:2.3:h:intel:xeon_e3_1225_v6:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Intel |
| cpe:2.3:h:intel:xeon_e3_1230_v6:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Intel |
| cpe:2.3:h:intel:xeon_e3_1240_v6:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Intel |
| cpe:2.3:h:intel:xeon_e3_1245_v6:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Intel |
| cpe:2.3:h:intel:xeon_e3_1270_v6:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Intel |
| cpe:2.3:h:intel:xeon_e3_1275_v6:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Intel |
| cpe:2.3:h:intel:xeon_e3_1280_v6:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Intel |
| cpe:2.3:h:intel:xeon_e3_1285_v6:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Intel |
| cpe:2.3:h:intel:xeon_e3_1501l_v6:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Intel |
| cpe:2.3:h:intel:xeon_e3_1501m_v6:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Intel |
| cpe:2.3:h:intel:xeon_e3_1505l_v6:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Intel |
- cpe:2.3:h:intel:core_i3:6167u:*:*:*:*:*:*:* Versions 6167u Vulnerable ·Intel
- cpe:2.3:h:intel:core_i3:6300:*:*:*:*:*:*:* Versions 6300 Vulnerable ·Intel
- cpe:2.3:h:intel:core_i3:6300t:*:*:*:*:*:*:* Versions 6300t Vulnerable ·Intel
- cpe:2.3:h:intel:core_i3:6320:*:*:*:*:*:*:* Versions 6320 Vulnerable ·Intel
- cpe:2.3:h:intel:core_i5:650:*:*:*:*:*:*:* Versions 650 Vulnerable ·Intel
- cpe:2.3:h:intel:core_i5:655k:*:*:*:*:*:*:* Versions 655k Vulnerable ·Intel
- cpe:2.3:h:intel:core_i5:660:*:*:*:*:*:*:* Versions 660 Vulnerable ·Intel
- cpe:2.3:h:intel:core_i5:661:*:*:*:*:*:*:* Versions 661 Vulnerable ·Intel
- cpe:2.3:h:intel:core_i5:670:*:*:*:*:*:*:* Versions 670 Vulnerable ·Intel
- cpe:2.3:h:intel:core_i5:680:*:*:*:*:*:*:* Versions 680 Vulnerable ·Intel
- cpe:2.3:h:intel:core_i5:6200u:*:*:*:*:*:*:* Versions 6200u Vulnerable ·Intel
- cpe:2.3:h:intel:core_i5:6260u:*:*:*:*:*:*:* Versions 6260u Vulnerable ·Intel
- cpe:2.3:h:intel:core_i5:6267u:*:*:*:*:*:*:* Versions 6267u Vulnerable ·Intel
- cpe:2.3:h:intel:core_i5:6287u:*:*:*:*:*:*:* Versions 6287u Vulnerable ·Intel
- cpe:2.3:h:intel:core_i5:6300hq:*:*:*:*:*:*:* Versions 6300hq Vulnerable ·Intel
- cpe:2.3:h:intel:core_i5:6300u:*:*:*:*:*:*:* Versions 6300u Vulnerable ·Intel
- cpe:2.3:h:intel:core_i5:6350hq:*:*:*:*:*:*:* Versions 6350hq Vulnerable ·Intel
- cpe:2.3:h:intel:core_i5:6360u:*:*:*:*:*:*:* Versions 6360u Vulnerable ·Intel
- cpe:2.3:h:intel:core_i5:6400:*:*:*:*:*:*:* Versions 6400 Vulnerable ·Intel
- cpe:2.3:h:intel:core_i5:6400t:*:*:*:*:*:*:* Versions 6400t Vulnerable ·Intel
- cpe:2.3:h:intel:core_i5:6402p:*:*:*:*:*:*:* Versions 6402p Vulnerable ·Intel
- cpe:2.3:h:intel:core_i5:6440eq:*:*:*:*:*:*:* Versions 6440eq Vulnerable ·Intel
- cpe:2.3:h:intel:core_i5:6440hq:*:*:*:*:*:*:* Versions 6440hq Vulnerable ·Intel
- cpe:2.3:h:intel:core_i5:6442eq:*:*:*:*:*:*:* Versions 6442eq Vulnerable ·Intel
- cpe:2.3:h:intel:core_i5:6500:*:*:*:*:*:*:* Versions 6500 Vulnerable ·Intel
- cpe:2.3:h:intel:core_i5:6500t:*:*:*:*:*:*:* Versions 6500t Vulnerable ·Intel
- cpe:2.3:h:intel:core_i5:6500te:*:*:*:*:*:*:* Versions 6500te Vulnerable ·Intel
- cpe:2.3:h:intel:core_i5:6585r:*:*:*:*:*:*:* Versions 6585r Vulnerable ·Intel
- cpe:2.3:h:intel:core_i5:6600:*:*:*:*:*:*:* Versions 6600 Vulnerable ·Intel
- cpe:2.3:h:intel:core_i5:6600k:*:*:*:*:*:*:* Versions 6600k Vulnerable ·Intel
- cpe:2.3:h:intel:core_i5:6600t:*:*:*:*:*:*:* Versions 6600t Vulnerable ·Intel
- cpe:2.3:h:intel:core_i5:6685r:*:*:*:*:*:*:* Versions 6685r Vulnerable ·Intel
- cpe:2.3:h:intel:core_i7:610e:*:*:*:*:*:*:* Versions 610e Vulnerable ·Intel
- cpe:2.3:h:intel:core_i7:620le:*:*:*:*:*:*:* Versions 620le Vulnerable ·Intel
- cpe:2.3:h:intel:core_i7:620lm:*:*:*:*:*:*:* Versions 620lm Vulnerable ·Intel
- cpe:2.3:h:intel:core_i7:620m:*:*:*:*:*:*:* Versions 620m Vulnerable ·Intel
- cpe:2.3:h:intel:core_i7:620ue:*:*:*:*:*:*:* Versions 620ue Vulnerable ·Intel
- cpe:2.3:h:intel:core_i7:620um:*:*:*:*:*:*:* Versions 620um Vulnerable ·Intel
- cpe:2.3:h:intel:core_i7:640lm:*:*:*:*:*:*:* Versions 640lm Vulnerable ·Intel
- cpe:2.3:h:intel:core_i7:640m:*:*:*:*:*:*:* Versions 640m Vulnerable ·Intel
- cpe:2.3:h:intel:core_i7:640um:*:*:*:*:*:*:* Versions 640um Vulnerable ·Intel
- cpe:2.3:h:intel:core_i7:660lm:*:*:*:*:*:*:* Versions 660lm Vulnerable ·Intel
- cpe:2.3:h:intel:core_i7:660ue:*:*:*:*:*:*:* Versions 660ue Vulnerable ·Intel
- cpe:2.3:h:intel:core_i7:660um:*:*:*:*:*:*:* Versions 660um Vulnerable ·Intel
- cpe:2.3:h:intel:core_i7:680um:*:*:*:*:*:*:* Versions 680um Vulnerable ·Intel
- cpe:2.3:h:intel:core_i5:750:*:*:*:*:*:*:* Versions 750 Vulnerable ·Intel
- cpe:2.3:h:intel:core_i5:750s:*:*:*:*:*:*:* Versions 750s Vulnerable ·Intel
- cpe:2.3:h:intel:core_i5:760:*:*:*:*:*:*:* Versions 760 Vulnerable ·Intel
- cpe:2.3:h:intel:core_i7:7y75:*:*:*:*:*:*:* Versions 7y75 Vulnerable ·Intel
- cpe:2.3:h:intel:core_i7:720qm:*:*:*:*:*:*:* Versions 720qm Vulnerable ·Intel
- cpe:2.3:h:intel:core_i7:740qm:*:*:*:*:*:*:* Versions 740qm Vulnerable ·Intel
- cpe:2.3:h:intel:core_i7:7500u:*:*:*:*:*:*:* Versions 7500u Vulnerable ·Intel
- cpe:2.3:h:intel:core_i7:7560u:*:*:*:*:*:*:* Versions 7560u Vulnerable ·Intel
- cpe:2.3:h:intel:core_i7:7567u:*:*:*:*:*:*:* Versions 7567u Vulnerable ·Intel
- cpe:2.3:h:intel:core_i7:7600u:*:*:*:*:*:*:* Versions 7600u Vulnerable ·Intel
- cpe:2.3:h:intel:core_i7:7660u:*:*:*:*:*:*:* Versions 7660u Vulnerable ·Intel
- cpe:2.3:h:intel:core_i7:7700:*:*:*:*:*:*:* Versions 7700 Vulnerable ·Intel
- cpe:2.3:h:intel:core_i7:7700hq:*:*:*:*:*:*:* Versions 7700hq Vulnerable ·Intel
- cpe:2.3:h:intel:core_i7:7700k:*:*:*:*:*:*:* Versions 7700k Vulnerable ·Intel
- cpe:2.3:h:intel:core_i7:7700t:*:*:*:*:*:*:* Versions 7700t Vulnerable ·Intel
- cpe:2.3:h:intel:core_i7:7820eq:*:*:*:*:*:*:* Versions 7820eq Vulnerable ·Intel
- cpe:2.3:h:intel:core_i7:7820hk:*:*:*:*:*:*:* Versions 7820hk Vulnerable ·Intel
- cpe:2.3:h:intel:core_i7:7820hq:*:*:*:*:*:*:* Versions 7820hq Vulnerable ·Intel
- cpe:2.3:h:intel:core_i7:7920hq:*:*:*:*:*:*:* Versions 7920hq Vulnerable ·Intel
- cpe:2.3:h:intel:core_i3:8100:*:*:*:*:*:*:* Versions 8100 Vulnerable ·Intel
- cpe:2.3:h:intel:core_i3:8350k:*:*:*:*:*:*:* Versions 8350k Vulnerable ·Intel
- cpe:2.3:h:intel:core_i5:8250u:*:*:*:*:*:*:* Versions 8250u Vulnerable ·Intel
- cpe:2.3:h:intel:core_i5:8350u:*:*:*:*:*:*:* Versions 8350u Vulnerable ·Intel
- cpe:2.3:h:intel:core_i5:8400:*:*:*:*:*:*:* Versions 8400 Vulnerable ·Intel
- cpe:2.3:h:intel:core_i5:8600k:*:*:*:*:*:*:* Versions 8600k Vulnerable ·Intel
- cpe:2.3:h:intel:core_i7:820qm:*:*:*:*:*:*:* Versions 820qm Vulnerable ·Intel
- cpe:2.3:h:intel:core_i7:840qm:*:*:*:*:*:*:* Versions 840qm Vulnerable ·Intel
- cpe:2.3:h:intel:core_i7:860:*:*:*:*:*:*:* Versions 860 Vulnerable ·Intel
- cpe:2.3:h:intel:core_i7:860s:*:*:*:*:*:*:* Versions 860s Vulnerable ·Intel
- cpe:2.3:h:intel:core_i7:870:*:*:*:*:*:*:* Versions 870 Vulnerable ·Intel
- cpe:2.3:h:intel:core_i7:870s:*:*:*:*:*:*:* Versions 870s Vulnerable ·Intel
- cpe:2.3:h:intel:core_i7:875k:*:*:*:*:*:*:* Versions 875k Vulnerable ·Intel
- cpe:2.3:h:intel:core_i7:880:*:*:*:*:*:*:* Versions 880 Vulnerable ·Intel
- cpe:2.3:h:intel:core_i7:8550u:*:*:*:*:*:*:* Versions 8550u Vulnerable ·Intel
- cpe:2.3:h:intel:core_i7:8650u:*:*:*:*:*:*:* Versions 8650u Vulnerable ·Intel
- cpe:2.3:h:intel:core_i7:8700:*:*:*:*:*:*:* Versions 8700 Vulnerable ·Intel
- cpe:2.3:h:intel:core_i7:8700k:*:*:*:*:*:*:* Versions 8700k Vulnerable ·Intel
- cpe:2.3:h:intel:xeon_e3:1515m_v5:*:*:*:*:*:*:* Versions 1515m_v5 Vulnerable ·Intel
- cpe:2.3:h:intel:xeon_e3:1535m_v5:*:*:*:*:*:*:* Versions 1535m_v5 Vulnerable ·Intel
- cpe:2.3:h:intel:xeon_e3:1545m_v5:*:*:*:*:*:*:* Versions 1545m_v5 Vulnerable ·Intel
- cpe:2.3:h:intel:xeon_e3:1558l_v5:*:*:*:*:*:*:* Versions 1558l_v5 Vulnerable ·Intel
- cpe:2.3:h:intel:xeon_e3:1565l_v5:*:*:*:*:*:*:* Versions 1565l_v5 Vulnerable ·Intel
- cpe:2.3:h:intel:xeon_e3:1575m_v5:*:*:*:*:*:*:* Versions 1575m_v5 Vulnerable ·Intel
- cpe:2.3:h:intel:xeon_e3:1578l_v5:*:*:*:*:*:*:* Versions 1578l_v5 Vulnerable ·Intel
- cpe:2.3:h:intel:xeon_e3:1585_v5:*:*:*:*:*:*:* Versions 1585_v5 Vulnerable ·Intel
- cpe:2.3:h:intel:xeon_e3:1585l_v5:*:*:*:*:*:*:* Versions 1585l_v5 Vulnerable ·Intel
- cpe:2.3:h:intel:xeon_e3_1220_v5:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Intel
- cpe:2.3:h:intel:xeon_e3_1225_v5:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Intel
- cpe:2.3:h:intel:xeon_e3_1230_v5:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Intel
- cpe:2.3:h:intel:xeon_e3_1235l_v5:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Intel
- cpe:2.3:h:intel:xeon_e3_1240_v5:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Intel
- cpe:2.3:h:intel:xeon_e3_1240l_v5:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Intel
- cpe:2.3:h:intel:xeon_e3_1245_v5:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Intel
- cpe:2.3:h:intel:xeon_e3_1260l_v5:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Intel
- cpe:2.3:h:intel:xeon_e3_1268l_v5:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Intel
- cpe:2.3:h:intel:xeon_e3_1270_v5:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Intel
- cpe:2.3:h:intel:xeon_e3_1275_v5:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Intel
- cpe:2.3:h:intel:xeon_e3_1280_v5:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Intel
- cpe:2.3:h:intel:xeon_e3_1505l_v5:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Intel
- cpe:2.3:h:intel:xeon_e3_1505m_v5:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Intel
- cpe:2.3:h:intel:xeon_e3:1505m_v6:*:*:*:*:*:*:* Versions 1505m_v6 Vulnerable ·Intel
- cpe:2.3:h:intel:xeon_e3:1535m_v6:*:*:*:*:*:*:* Versions 1535m_v6 Vulnerable ·Intel
- cpe:2.3:h:intel:xeon_e3_1220_v6:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Intel
- cpe:2.3:h:intel:xeon_e3_1225_v6:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Intel
- cpe:2.3:h:intel:xeon_e3_1230_v6:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Intel
- cpe:2.3:h:intel:xeon_e3_1240_v6:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Intel
- cpe:2.3:h:intel:xeon_e3_1245_v6:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Intel
- cpe:2.3:h:intel:xeon_e3_1270_v6:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Intel
- cpe:2.3:h:intel:xeon_e3_1275_v6:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Intel
- cpe:2.3:h:intel:xeon_e3_1280_v6:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Intel
- cpe:2.3:h:intel:xeon_e3_1285_v6:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Intel
- cpe:2.3:h:intel:xeon_e3_1501l_v6:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Intel
- cpe:2.3:h:intel:xeon_e3_1501m_v6:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Intel
- cpe:2.3:h:intel:xeon_e3_1505l_v6:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Intel
Remediation
Microsoft 1 update
- Microsoft Guidance to mitigate L1TF variant
Fixed in the same release
Records fixed by the same vendor advisory or release, as the CNA lists them.
- Advisory ·
Intel Multiple — 20180814 CPU Side-Channel Information Disclosure Vulnerabilities: August 2018
3 records Highest priority Priority MEDIUM 1 MEDIUM, 2 LOW
Other records, highest priority first
- TI-2018-02669 Information disclosure in Intel MultiplePriority LOW 36
- TI-2018-02653 Observable discrepancy in Intel MultiplePriority LOW 34
Timeline
- 2026-10-02 Threatist record created from CVE-2018-3615
- 2026-10-03 Alias added: GHSA-9w6j-7396-jgw4
References
Advisory 12
- VU#982149
- https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2018-0008
- https://foreshadowattack.eu/
- https://security.netapp.com/advisory/ntap-20180815-0001/
- 20180814 CPU Side-Channel Information Disclosure Vulnerabilities: August 2018
- https://support.f5.com/csp/article/K35558453
- http://support.lenovo.com/us/en/solutions/LEN-24163
- http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20180815-01-cpu-en
- https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00161.html
- https://www.synology.com/support/security/Synology_SA_18_45
- https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03874en_us
- https://software.intel.com/security-software-guidance/software-guidance/l1-terminal-fault
More Intel Core I3 vulnerabilities
- TI-2017-03716 Observable discrepancy in Intel Most Modern Operating Systems CVSS 3.1MEDIUM 5.6
- TI-2017-03706 Observable discrepancy in Intel Microprocessors with Speculative Execution CVSS 3.1MEDIUM 5.6
- TI-2017-03717 Information disclosure in Intel Most Modern Operating Systems CVSS 3.1MEDIUM 5.6
- TI-2018-02664 Observable discrepancy in Intel Multiple CVSS 3.1MEDIUM 5.5
- TI-2018-02697 Systems with microprocessors utilizing speculative execution and branch prediction may… CVSS 3.1MEDIUM 5.6
- TI-2018-02669 Information disclosure in Intel Multiple CVSS 3.1MEDIUM 5.6
Sources
- CVE-2018-3615 · CVE Program
- CVE-2018-3615 · NVD
- FIRST EPSS
- GHSA-9w6j-7396-jgw4 · GitHub Advisory Database · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences