60
CVE-2018-3640
- CVSS 3.0
- 5.6 medium
- EPSS
- 8%p94
- Published
- ·
- Modified
Description · NVD
Systems with microprocessors utilizing speculative execution and that perform speculative reads of system registers may allow unauthorized disclosure of system parameters to an attacker with local user access via a side-channel analysis, aka Rogue System Register Read (RSRE), Variant 3a.
- Products
- atom c, atom e, atom z, celeron j, celeron n, core i3, core i5, core i7, core m, pentium, pentium j, pentium silver
- Weakness
- CWE-203
- Vector
- CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N
In the news
3 stories35
58 hardware vulnerabilities: A guide to the threats
CSO Online reference guide catalogs 58 CPU and DRAM hardware vulnerabilities from Spectre and Meltdown onward, covering side-channel flaws and mitigation limits.
18