{"id":"CVE-2018-3615","url":"https://www.cyber-defence.io/tools/cve/CVE-2018-3615","generatedAt":"2026-10-28T19:04:42.991Z","title":"Systems with microprocessors utilizing speculative execution and Intel software guard extensions (Intel SGX) may allow unauthorized disclosure of information residing in the L1 data cache from an enclave to an attacker with local user access via a…","description":"Systems with microprocessors utilizing speculative execution and Intel software guard extensions (Intel SGX) may allow unauthorized disclosure of information residing in the L1 data cache from an enclave to an attacker with local user access via a side-channel analysis.","published":"2018-08-14T19:29:01.000Z","lastModified":"2026-06-17T01:57:34.000Z","status":"Modified","sourceIdentifier":"secure@intel.com","cvss":{"version":"3.1","score":7.3,"severity":"HIGH","vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:L/A:N"},"cwe":["CWE-203"],"affected":["intel/core i3","intel/core i5","intel/core i7","intel/xeon e3","intel/xeon e3 1220 v5","intel/xeon e3 1225 v5","intel/xeon e3 1230 v5","intel/xeon e3 1235l v5","intel/xeon e3 1240 v5","intel/xeon e3 1240l v5","intel/xeon e3 1245 v5","intel/xeon e3 1260l v5","intel/xeon e3 1268l v5","intel/xeon e3 1270 v5","intel/xeon e3 1275 v5","intel/xeon e3 1280 v5","intel/xeon e3 1505l v5","intel/xeon e3 1505m v5","intel/xeon e3 1220 v6","intel/xeon e3 1225 v6","intel/xeon e3 1230 v6","intel/xeon e3 1240 v6","intel/xeon e3 1245 v6","intel/xeon e3 1270 v6","intel/xeon e3 1275 v6","intel/xeon e3 1280 v6","intel/xeon e3 1285 v6","intel/xeon e3 1501l v6","intel/xeon e3 1501m v6","intel/xeon e3 1505l v6"],"epss":{"score":0.06301,"percentile":0.93566,"date":"2026-10-27","history":[]},"kev":{"listed":false},"exploits":{"count":0,"verified":false,"firstPublished":null,"source":"Exploit-DB (https://gitlab.com/exploit-database/exploitdb)","entries":[]},"verdict":{"level":"high","text":"High impact if exploited, but EPSS currently rates exploitation as unlikely (6.30%). Schedule it in the normal patch cycle and watch for a rise in EPSS or a public exploit."},"changes":[],"references":[{"url":"http://support.lenovo.com/us/en/solutions/LEN-24163","tags":["Third Party Advisory"],"source":"secure@intel.com"},{"url":"http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20180815-01-cpu-en","tags":["Third Party Advisory"],"source":"secure@intel.com"},{"url":"http://www.securityfocus.com/bid/105080","tags":["Third Party Advisory","VDB Entry"],"source":"secure@intel.com"},{"url":"http://www.securitytracker.com/id/1041451","tags":["Third Party Advisory","VDB Entry"],"source":"secure@intel.com"},{"url":"https://cert-portal.siemens.com/productcert/pdf/ssa-254686.pdf","source":"secure@intel.com"},{"url":"https://cert-portal.siemens.com/productcert/pdf/ssa-608355.pdf","source":"secure@intel.com"},{"url":"https://foreshadowattack.eu/","tags":["Technical Description","Third Party Advisory"],"source":"secure@intel.com"},{"url":"https://lists.debian.org/debian-lts-announce/2018/09/msg00017.html","source":"secure@intel.com"},{"url":"https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2018-0008","tags":["Third Party Advisory"],"source":"secure@intel.com"},{"url":"https://security.netapp.com/advisory/ntap-20180815-0001/","tags":["Third Party Advisory"],"source":"secure@intel.com"},{"url":"https://software.intel.com/security-software-guidance/software-guidance/l1-terminal-fault","tags":["Mitigation","Vendor Advisory"],"source":"secure@intel.com"},{"url":"https://support.f5.com/csp/article/K35558453","tags":["Third Party Advisory"],"source":"secure@intel.com"},{"url":"https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03874en_us","tags":["Third Party Advisory"],"source":"secure@intel.com"},{"url":"https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180814-cpusidechannel","tags":["Third Party Advisory"],"source":"secure@intel.com"},{"url":"https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00161.html","tags":["Vendor Advisory"],"source":"secure@intel.com"},{"url":"https://www.kb.cert.org/vuls/id/982149","tags":["Third Party Advisory"],"source":"secure@intel.com"},{"url":"https://www.synology.com/support/security/Synology_SA_18_45","tags":["Third Party Advisory"],"source":"secure@intel.com"},{"url":"http://support.lenovo.com/us/en/solutions/LEN-24163","tags":["Third Party Advisory"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20180815-01-cpu-en","tags":["Third Party Advisory"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/105080","tags":["Third Party Advisory","VDB Entry"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1041451","tags":["Third Party Advisory","VDB Entry"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://cert-portal.siemens.com/productcert/pdf/ssa-254686.pdf","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://cert-portal.siemens.com/productcert/pdf/ssa-608355.pdf","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://foreshadowattack.eu/","tags":["Technical Description","Third Party Advisory"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.debian.org/debian-lts-announce/2018/09/msg00017.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2018-0008","tags":["Third Party Advisory"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://security.netapp.com/advisory/ntap-20180815-0001/","tags":["Third Party Advisory"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://software.intel.com/security-software-guidance/software-guidance/l1-terminal-fault","tags":["Mitigation","Vendor Advisory"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://support.f5.com/csp/article/K35558453","tags":["Third Party Advisory"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03874en_us","tags":["Third Party Advisory"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180814-cpusidechannel","tags":["Third Party Advisory"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00161.html","tags":["Vendor Advisory"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.kb.cert.org/vuls/id/982149","tags":["Third Party Advisory"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.synology.com/support/security/Synology_SA_18_45","tags":["Third Party Advisory"],"source":"af854a3a-2127-422b-91ae-364da2661108"}],"sources":{"nvd":"https://nvd.nist.gov/vuln/detail/CVE-2018-3615","epss":"https://www.first.org/epss/","kev":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog","exploitdb":"https://www.exploit-db.com/"},"licence":"CC BY 4.0 — link back to the CVE Explorer if you publish the results; upstream data remains subject to its own terms."}