vulnerability

Cisco XE: CVE-2018-3615: CPU Side-Channel Information Disclosure Vulnerabilities: August 2018

Try Surface Command

Back to search

Severity

CVSS

(AV:L/AC:M/Au:N/C:C/I:P/A:N)

Published

Aug 14, 2018

Added

Jul 30, 2019

Modified

Nov 13, 2023

Description

Systems with microprocessors utilizing speculative execution and Intel software guard extensions (Intel SGX) may allow unauthorized disclosure of information residing in the L1 data cache from an enclave to an attacker with local user access via a side-channel analysis.

Solution

cisco-xe-upgrade-latest

References

BID-105080
CERT-VN-982149
CVE-2018-3615
https://attackerkb.com/topics/CVE-2018-3615
https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180814-cpusidechannel

Rapid7 Labs

2026 Global Threat Landscape Report

The predictive window has collapsed. Exploitation follows disclosure in days. See how attackers are accelerating and how to stay ahead.

Get report