CVE-2018-3615

7.3 HIGH
Published: August 14, 2018 Modified: May 29, 2026
View on NVD

Description

Systems with microprocessors utilizing speculative execution and Intel software guard extensions (Intel SGX) may allow unauthorized disclosure of information residing in the L1 data cache from an enclave to an attacker with local user access via a side-channel analysis.

AI Explanation

Get an AI-powered plain-language explanation of this vulnerability and remediation steps.

Login to generate AI explanation

CVSS v3.x Details

0.0 Low Medium High Critical 10.0
Vector String
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:L/A:N

References to Advisories, Solutions, and Tools

Patch Vendor Advisory Exploit Third Party Advisory
http://support.lenovo.com/us/en/solutions/LEN-24163
Source: secure@intel.com
Third Party Advisory
http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20180815-01-cpu-en
Source: secure@intel.com
Third Party Advisory
http://www.securityfocus.com/bid/105080
Source: secure@intel.com
Third Party Advisory VDB Entry
http://www.securitytracker.com/id/1041451
Source: secure@intel.com
Third Party Advisory VDB Entry
https://cert-portal.siemens.com/productcert/pdf/ssa-254686.pdf
Source: secure@intel.com
https://cert-portal.siemens.com/productcert/pdf/ssa-608355.pdf
Source: secure@intel.com
https://foreshadowattack.eu/
Source: secure@intel.com
Technical Description Third Party Advisory
https://lists.debian.org/debian-lts-announce/2018/09/msg00017.html
Source: secure@intel.com
https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2018-0008
Source: secure@intel.com
Third Party Advisory
https://security.netapp.com/advisory/ntap-20180815-0001/
Source: secure@intel.com
Third Party Advisory
https://software.intel.com/security-software-guidance/software-guidance/l1-terminal-fault
Source: secure@intel.com
Mitigation Vendor Advisory
https://support.f5.com/csp/article/K35558453
Source: secure@intel.com
Third Party Advisory
https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03874en_us
Source: secure@intel.com
Third Party Advisory
https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180814-cpusidechannel
Source: secure@intel.com
Third Party Advisory
https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00161.html
Source: secure@intel.com
Vendor Advisory
https://www.kb.cert.org/vuls/id/982149
Source: secure@intel.com
Third Party Advisory
https://www.synology.com/support/security/Synology_SA_18_45
Source: secure@intel.com
Third Party Advisory
http://support.lenovo.com/us/en/solutions/LEN-24163
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory
http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20180815-01-cpu-en
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory
http://www.securityfocus.com/bid/105080
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory VDB Entry
http://www.securitytracker.com/id/1041451
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory VDB Entry
https://cert-portal.siemens.com/productcert/pdf/ssa-254686.pdf
Source: af854a3a-2127-422b-91ae-364da2661108
https://cert-portal.siemens.com/productcert/pdf/ssa-608355.pdf
Source: af854a3a-2127-422b-91ae-364da2661108
https://foreshadowattack.eu/
Source: af854a3a-2127-422b-91ae-364da2661108
Technical Description Third Party Advisory
https://lists.debian.org/debian-lts-announce/2018/09/msg00017.html
Source: af854a3a-2127-422b-91ae-364da2661108
https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2018-0008
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory
https://security.netapp.com/advisory/ntap-20180815-0001/
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory
https://software.intel.com/security-software-guidance/software-guidance/l1-terminal-fault
Source: af854a3a-2127-422b-91ae-364da2661108
Mitigation Vendor Advisory
https://support.f5.com/csp/article/K35558453
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory
https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03874en_us
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory
https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180814-cpusidechannel
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory
https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00161.html
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory
https://www.kb.cert.org/vuls/id/982149
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory
https://www.synology.com/support/security/Synology_SA_18_45
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory

34 reference(s) from NVD

Quick Stats

CVSS v3 Score
7.3 / 10.0
EPSS (Exploit Probability)
6.3%
93th percentile
Exploitation Status
Not in CISA KEV

Weaknesses (CWE)

CWE-203 CWE-203

Affected Vendors

intel

Related CVEs

CVE-2026-58517 N/A
CVE-2026-58451 6.5
CVE-2026-55628 5.5
CVE-2026-55597 5.5
CVE-2026-55595 4.7