Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2018-3615

Systems with microprocessors utilizing speculative execution and Intel software guard extensions (Intel SGX) may allow unauthorized disclosure of information residing in the L1 data cache from an enclave to an attacker with local user access via a side-channel analysis.

Security Impact Summary

This vulnerability carries a MEDIUM severity rating with a CVSS v3.1 score of 6.4, requiring local system access to exploit but requires specific conditions to be met without requiring user interaction requiring only low-level privileges . The vulnerability impacts confidentiality (data exposure), limited integrity, for affected systems. Impacting 30 products from intel, from intel, from intel and 27 others, organizations running these solutions should prioritize assessment and patching.

Historical Context

First disclosed in 2018, this vulnerability was reported during a period defined by widespread IoT adoption challenges, mobile security concerns, and the emergence of advanced persistent threat (APT) techniques. Contemporary mitigation strategies focused on secure development practices and third-party component vetting.

Published

2018-08-14T19:29:00.670

Last Modified

2024-11-21T04:05:46.490

Status

Modified

Source

[email protected]

Severity

CVSSv3.0: 6.4 (MEDIUM)

CVSSv2 Vector

AV:L/AC:M/Au:N/C:C/I:P/A:N

  • Access Vector: LOCAL
  • Access Complexity: MEDIUM
  • Authentication: NONE
  • Confidentiality Impact: COMPLETE
  • Integrity Impact: PARTIAL
  • Availability Impact: NONE
Exploitability Score

3.4

Impact Score

7.8

Weaknesses
  • Type: Primary
    CWE-203
Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Hardware intel core_i3 6006u Yes
Hardware intel core_i3 6098p Yes
Hardware intel core_i3 6100 Yes
Hardware intel core_i3 6100e Yes
Hardware intel core_i3 6100h Yes
Hardware intel core_i3 6100t Yes
Hardware intel core_i3 6100te Yes
Hardware intel core_i3 6100u Yes
Hardware intel core_i3 6102e Yes
Hardware intel core_i3 6157u Yes
Hardware intel core_i3 6167u Yes
Hardware intel core_i3 6300 Yes
Hardware intel core_i3 6300t Yes
Hardware intel core_i3 6320 Yes
Hardware intel core_i5 650 Yes
Hardware intel core_i5 655k Yes
Hardware intel core_i5 660 Yes
Hardware intel core_i5 661 Yes
Hardware intel core_i5 670 Yes
Hardware intel core_i5 680 Yes
Hardware intel core_i5 6200u Yes
Hardware intel core_i5 6260u Yes
Hardware intel core_i5 6267u Yes
Hardware intel core_i5 6287u Yes
Hardware intel core_i5 6300hq Yes
Hardware intel core_i5 6300u Yes
Hardware intel core_i5 6350hq Yes
Hardware intel core_i5 6360u Yes
Hardware intel core_i5 6400 Yes
Hardware intel core_i5 6400t Yes
Hardware intel core_i5 6402p Yes
Hardware intel core_i5 6440eq Yes
Hardware intel core_i5 6440hq Yes
Hardware intel core_i5 6442eq Yes
Hardware intel core_i5 6500 Yes
Hardware intel core_i5 6500t Yes
Hardware intel core_i5 6500te Yes
Hardware intel core_i5 6585r Yes
Hardware intel core_i5 6600 Yes
Hardware intel core_i5 6600k Yes
Hardware intel core_i5 6600t Yes
Hardware intel core_i5 6685r Yes
Hardware intel core_i7 610e Yes
Hardware intel core_i7 620le Yes
Hardware intel core_i7 620lm Yes
Hardware intel core_i7 620m Yes
Hardware intel core_i7 620ue Yes
Hardware intel core_i7 620um Yes
Hardware intel core_i7 640lm Yes
Hardware intel core_i7 640m Yes
Hardware intel core_i7 640um Yes
Hardware intel core_i7 660lm Yes
Hardware intel core_i7 660ue Yes
Hardware intel core_i7 660um Yes
Hardware intel core_i7 680um Yes
Hardware intel core_i5 750 Yes
Hardware intel core_i5 750s Yes
Hardware intel core_i5 760 Yes
Hardware intel core_i7 7y75 Yes
Hardware intel core_i7 720qm Yes
Hardware intel core_i7 740qm Yes
Hardware intel core_i7 7500u Yes
Hardware intel core_i7 7560u Yes
Hardware intel core_i7 7567u Yes
Hardware intel core_i7 7600u Yes
Hardware intel core_i7 7660u Yes
Hardware intel core_i7 7700 Yes
Hardware intel core_i7 7700hq Yes
Hardware intel core_i7 7700k Yes
Hardware intel core_i7 7700t Yes
Hardware intel core_i7 7820eq Yes
Hardware intel core_i7 7820hk Yes
Hardware intel core_i7 7820hq Yes
Hardware intel core_i7 7920hq Yes
Hardware intel core_i3 8100 Yes
Hardware intel core_i3 8350k Yes
Hardware intel core_i5 8250u Yes
Hardware intel core_i5 8350u Yes
Hardware intel core_i5 8400 Yes
Hardware intel core_i5 8600k Yes
Hardware intel core_i7 820qm Yes
Hardware intel core_i7 840qm Yes
Hardware intel core_i7 860 Yes
Hardware intel core_i7 860s Yes
Hardware intel core_i7 870 Yes
Hardware intel core_i7 870s Yes
Hardware intel core_i7 875k Yes
Hardware intel core_i7 880 Yes
Hardware intel core_i7 8550u Yes
Hardware intel core_i7 8650u Yes
Hardware intel core_i7 8700 Yes
Hardware intel core_i7 8700k Yes
Hardware intel xeon_e3 1515m_v5 Yes
Hardware intel xeon_e3 1535m_v5 Yes
Hardware intel xeon_e3 1545m_v5 Yes
Hardware intel xeon_e3 1558l_v5 Yes
Hardware intel xeon_e3 1565l_v5 Yes
Hardware intel xeon_e3 1575m_v5 Yes
Hardware intel xeon_e3 1578l_v5 Yes
Hardware intel xeon_e3 1585_v5 Yes
Hardware intel xeon_e3 1585l_v5 Yes
Hardware intel xeon_e3_1220_v5 - Yes
Hardware intel xeon_e3_1225_v5 - Yes
Hardware intel xeon_e3_1230_v5 - Yes
Hardware intel xeon_e3_1235l_v5 - Yes
Hardware intel xeon_e3_1240_v5 - Yes
Hardware intel xeon_e3_1240l_v5 - Yes
Hardware intel xeon_e3_1245_v5 - Yes
Hardware intel xeon_e3_1260l_v5 - Yes
Hardware intel xeon_e3_1268l_v5 - Yes
Hardware intel xeon_e3_1270_v5 - Yes
Hardware intel xeon_e3_1275_v5 - Yes
Hardware intel xeon_e3_1280_v5 - Yes
Hardware intel xeon_e3_1505l_v5 - Yes
Hardware intel xeon_e3_1505m_v5 - Yes
Hardware intel xeon_e3 1505m_v6 Yes
Hardware intel xeon_e3 1535m_v6 Yes
Hardware intel xeon_e3_1220_v6 - Yes
Hardware intel xeon_e3_1225_v6 - Yes
Hardware intel xeon_e3_1230_v6 - Yes
Hardware intel xeon_e3_1240_v6 - Yes
Hardware intel xeon_e3_1245_v6 - Yes
Hardware intel xeon_e3_1270_v6 - Yes
Hardware intel xeon_e3_1275_v6 - Yes
Hardware intel xeon_e3_1280_v6 - Yes
Hardware intel xeon_e3_1285_v6 - Yes
Hardware intel xeon_e3_1501l_v6 - Yes
Hardware intel xeon_e3_1501m_v6 - Yes
Hardware intel xeon_e3_1505l_v6 - Yes
References

How SecUtils Interprets This CVE

SecUtils normalizes and enriches National Vulnerability Database (NVD) records by standardizing vendor and product identifiers, aggregating vulnerability metadata from both NVD and MITRE sources, and providing structured context for security teams. For intel's affected products, we extract Common Platform Enumeration (CPE) data, Common Weakness Enumeration (CWE) classifications, CVSS severity metrics, and reference data to enable rapid vulnerability prioritization and asset correlation. This record contains no exploit code, proof-of-concept instructions, or attack methodologies—only defensive intelligence necessary for patch management, risk assessment, and security operations.