What’s Vulnerable › Vulnerabilities

CVE-2018-3615

• Severity: medium (CVSS 6.4 v3.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 6.3% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2018-08-14 · updated 2026-06-17
• Weakness: CWE-203

Description

Systems with microprocessors utilizing speculative execution and Intel software guard extensions (Intel SGX) may allow unauthorized disclosure of information residing in the L1 data cache from an enclave to an attacker with local user access via a side-channel analysis.

Affected products

• Intel Core I3: 6006u, 6098p, 6100, 6100e, 6100h, 6100t (+10)
• Intel Core I5: 650, 655k, 660, 661, 670, 680 (+29)
• Intel Core I7: 610e, 620le, 620lm, 620m, 620ue, 620um (+35)
• Intel Xeon E3: 1515m_v5, 1535m_v5, 1545m_v5, 1558l_v5, 1565l_v5, 1575m_v5 (+5)
• Intel Xeon E3 1220 V5: all versions
• Intel Xeon E3 1220 V6: all versions
• Intel Xeon E3 1225 V5: all versions
• Intel Xeon E3 1225 V6: all versions
• Intel Xeon E3 1230 V5: all versions
• Intel Xeon E3 1230 V6: all versions
• Intel Xeon E3 1235L V5: all versions
• Intel Xeon E3 1240 V5: all versions
• Intel Xeon E3 1240 V6: all versions
• Intel Xeon E3 1240L V5: all versions
• Intel Xeon E3 1245 V5: all versions
• Intel Xeon E3 1245 V6: all versions
• Intel Xeon E3 1260L V5: all versions
• Intel Xeon E3 1268L V5: all versions
• Intel Xeon E3 1270 V5: all versions
• Intel Xeon E3 1270 V6: all versions
• Intel Xeon E3 1275 V5: all versions
• Intel Xeon E3 1275 V6: all versions
• Intel Xeon E3 1280 V5: all versions
• Intel Xeon E3 1280 V6: all versions
• Intel Xeon E3 1285 V6: all versions
• Intel Xeon E3 1501L V6: all versions
• Intel Xeon E3 1501M V6: all versions
• Intel Xeon E3 1505L V5: all versions
• Intel Xeon E3 1505L V6: all versions
• Intel Xeon E3 1505M V5: all versions

References

• http://support.lenovo.com/us/en/solutions/LEN-24163
• http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20180815-01-cpu-en
• http://www.securityfocus.com/bid/105080
• http://www.securitytracker.com/id/1041451
• https://cert-portal.siemens.com/productcert/pdf/ssa-254686.pdf
• https://cert-portal.siemens.com/productcert/pdf/ssa-608355.pdf
• https://foreshadowattack.eu/
• https://lists.debian.org/debian-lts-announce/2018/09/msg00017.html
• https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2018-0008
• https://security.netapp.com/advisory/ntap-20180815-0001/
• https://software.intel.com/security-software-guidance/software-guidance/l1-terminal-fault
• https://support.f5.com/csp/article/K35558453

Get alerted when CVE-2018-3615 or the next vulnerability affects your stack