SOC status:Duty analyst on shift

UK Cyber Defence
VulnerabilityModified

CVE-2018-3619

Information disclosure vulnerability in storage media in systems with Intel Optane memory module with Whole Disk Encryption may allow an attacker to recover data via physical access.

MEDIUM 4.6EPSS 0.21%

Does this matter?

Lower severity and a low EPSS score (0.21%). Track it; it rarely justifies an emergency change on its own.

Description

Information disclosure vulnerability in storage media in systems with Intel Optane memory module with Whole Disk Encryption may allow an attacker to recover data via physical access.

CVSS 3.0
4.6 MEDIUMCVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
EPSS
0.21% probability · 12th percentile
CISA KEV
Not listed
Weakness
CWE-200
Affected
intel/core i7 · intel/core i5 · intel/core i3 · intel/core i9 · intel/core m3 · intel/xeon e-2124 · intel/xeon e-2124g · intel/xeon e-2126g · intel/xeon e-2134 · intel/xeon e-2136 · intel/xeon e-2144g · intel/xeon e-2146g · intel/xeon e-2174g · intel/xeon e-2176g · intel/xeon e-2176m · intel/xeon e-2186g · intel/xeon e-2186m
Source
secure@intel.com

Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.